CVE-2026-55738

نوع الضعف

A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.

المراجع

• https://github.com/rxi/microtar
• https://github.com/rxi/microtar/blob/master/src/microtar.c#L111
• https://raw.githubusercontent.com/rxi/microtar/master/src/microtar.c