CVE-2025-11579

MEDIUM

nwaples/rardecode <= 2.1.1 - Denial of Service via Large RAR Dictionary Size

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-11579. PoCs published by shinigami-777.

AI-analyzed exploit summary This repository contains a functional Go-based PoC for CVE-2025-11579, exploiting a DoS vulnerability in rardecode versions <= 2.1.1 by crafting a RAR file with an artificially large dictionary size to trigger an out-of-memory crash.

Description

github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.

Exploits (1)

github WORKING POC
by shinigami-777 · gopoc
https://github.com/shinigami-777/PoC_CVE-2025-11579

This repository contains a functional Go-based PoC for CVE-2025-11579, exploiting a DoS vulnerability in rardecode versions <= 2.1.1 by crafting a RAR file with an artificially large dictionary size to trigger an out-of-memory crash.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: rardecode <= 2.1.1
No auth needed
Prerequisites: A crafted RAR file with an artificially large dictionary size
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 5.3
EPSS 0.0002
EPSS Percentile 6.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-789
Status published
Products (3)
nwaples/rardecode < 2.1.1
nwaples/rardecode 0Go
nwaples/rardecode 0 - 2.2.0Go
Published Oct 10, 2025
Tracked Since Feb 18, 2026