https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T09:03:05.142074+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111273 fkie_cve-2026-111273 2026-10-19T09:03:05.175095+00:00

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashing the process.

 https://db.gcve.eu/vuln/ghsa-2v49-qr2f-xxxp GHSA-2v49-qr2f-xxxp 2026-10-19T09:03:05.175172+00:00

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashing the process.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-111273 UBUNTU-CVE-2026-111273 2026-10-19T09:03:05.175197+00:00

Affected: Ubuntu:20.04:LTS: unarr, Ubuntu:22.04:LTS: unarr, Ubuntu:24.04:LTS: unarr

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashing the process.