Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-55738

Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TuranSec

Description

A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

rxi microtar

Default version status: affected

  • 0.1.0affected

References