Infinite loop

Overview com.github.junrar:junrar is a rar decompression library in plain java. Affected versions of this package are vulnerable to Infinite loop through the RarVM.ExecuteCode process. An attacker can cause the extraction thread to enter an infinite loop and exhaust CPU resources by providing a...

CVE-2026-97370

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

EUVD-2026-102251

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

CVE-2026-97370

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

CVE-2026-97370: Loop with Unreachable Exit Condition

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

PT-2026-115111

Name of the Vulnerable Software and Affected Versions Junrar versions prior to 7.6.1 Description An issue exists in the RAR virtual machine where a crafted RAR4 archive can force the extraction thread into a deterministic infinite CPU loop. This occurs because the RarVM.ExecuteCode function in...