PT-2025-17645

CVE-2025-46394

·

Published

2025-04-23

·

Updated

2026-09-18

Description by

CVSS 3.1
3.3
Low
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions BusyBox versions through 1.37.0
Description A TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Recommendations For versions through 1.37.0, consider updating to a version that fixes this issue to prevent filenames from being hidden in TAR archives.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-451: User Interface (UI) Misrepresentation of Critical Information
Related identifiers
CVE-2025-46394
BDU:2026-05691
AZL-60936
AZL-61191
CLEANSTART-2026-GV62494
CLEANSTART-2026-OL25917
CLEANSTART-2026-OT80419
CLEANSTART-2026-QO29688
CLEANSTART-2026-XR35583
ECHO-B00E-22B9-2A35
OESA-2025-1881
OESA-2025-1882
OESA-2025-1883
OESA-2025-1884
OESA-2025-1885
OESA-2025-1886
OPENSUSE-SU-2025:15834-1
OPENSUSE-SU-2026:20090-1
SUSE-SU-2026:0235-1
SUSE-SU-2026:0236-1
SUSE-SU-2026:0872-1
SUSE-SU-2026:0892-1
SUSE-SU-2026:20134-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com