CVE-2026-126831

A stack-based buffer overflow exists in cpio within the write_out_tar_header() function. The vulnerability occurs when creating archives in tar or ustar formats if the files are owned by users or groups with names exceeding 32 characters. Because the application fails to verify the length of thes...