EUVD-2026-102528

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...

CVE-2026-111273

The unarr software (versions through 1.1.1 ) is vulnerable to an off-by-one heap-based buffer overflow within the tar_get_name() function located in tar/parse-tar.c. This vulnerability is reachable through the ar_entry_get_name() API. An attacker can exploit this by providing a crafted TAR archiv...

CVE-2026-111273 unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...