Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

Summary Junrar's RAR virtual machine can be forced into a deterministic infinite loop while extracting a crafted RAR4 archive. The RarVM.ExecuteCode loop is intended to be bounded by maxOpCount, but jump instructions can bypass this limit when setIP is called with a target instruction pointer...

EUVD-2026-102251

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

CVE-2026-97370

The Junrar open-source Java RAR archive library is vulnerable to a CPU exhaustion flaw in versions prior to 7.6.1 . The root cause is located in RarVM.ExecuteCode within src/main/java/com/github/junrar/unpack/vm/RarVM.java, where a VM_JMP instruction can repeatedly execute if its target is greate...