A high-severity stack-based buffer overflow vulnerability exists in the microtar library, specifically in the raw_to_header() function. This function improperly handles the copying of 100-byte name and linkname fields from a TAR header, leading to potential out-of-bounds reads and writes. A remote attacker can exploit this by supplying a crafted TAR archive, potentially leading to denial of service or arb [truncated]
CVE-2026-54417 is a high severity vulnerability in rxi microtar 0.1.0 that allows remote attackers to cause a denial of service via a crafted tar archive. The vulnerability is caused by an integer overflow in the mtar_next() function in src/microtar.c. The function computes the offset to the next record using 32-bit arithmetic, which can wrap to 0 when the header size field is a multiple of 512 in the ran [truncated]
