A heap-based out-of-bounds read vulnerability exists in unarr through 1.1.1 in the zip_parse_extra_fields function due to an incorrect ZIP64 extra field length check. This allows attackers to supply a crafted ZIP archive that can cause a process crash. The vulnerability impacts systems or applications using unarr, and defenders should assess exposure and prioritize verification and potential updates. This [truncated]
A buffer overflow vulnerability exists in unarr through 1.1.1 in the tar_get_name() function, which can be exploited by supplying a crafted TAR archive. This issue can lead to a process crash and potential heap memory corruption. The vulnerability is caused by an off-by-one error in the tar_get_name() function, which can be triggered by a specially crafted TAR archive. Defenders should prioritize verifyin [truncated]
