Ekkosun

A critical issue affects the function `msf stream directory free` in the library `/librz/bin/pdb/pdb.c`. The manipulation of the argument `-P` leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in rizinorg rizin, affecting the `rz utf8 encode` function in the library `/librz/util/utf8.c`. The manipulation leads to a heap-based buffer overflow. An attack must be approached locally. The exploit has been disclosed to the public and may be used.

The issue is related to the `list item verbose` function in `tar/util.c`, which does not check the return value of `strftime`. This can lead to a denial of service or other unspecified impact when a crafted TAR archive is read with a verbose value of 2. The problem may occur due to insufficient buffer size, such as the 100-byte buffer, for custom locales.