Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/15 8:09 p.m.•3 views

Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

Summary Junrar's RAR virtual machine can be forced into a deterministic infinite loop while extracting a crafted RAR4 archive. The RarVM.ExecuteCode loop is intended to be bounded by maxOpCount, but jump instructions can bypass this limit when setIP is called with a target instruction pointer...

7.5CVSS6.1AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder