Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-71267

microtar Stack Buffer Overflow in mtar_write_file_header() and mtar_write_dir_header()

Description

microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar_header_t via strcpy(h.name, name), with no check that strlen(name) is less than 100 before the copy.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

rxi microtar

Default version status: unaffected

  • 0 to ≤ *affected

References