[Under Evaluation – CVE-2026-14164]: A double-free in libarchive RAR5 reader can be triggered by parsing a crafted RAR5 archive: filtered_buf may stay stale after free during unpacking reinit, then a later entry frees the same region again. Exploitation can crash apps using the libarchive API (DoS). Patch via vendor updates (e.g., Red Hat for libarchive) or avoid parsing untrusted RAR5.