CVE-2026-55738

Name of the Vulnerable Software and Affected Versions rxi microtar version 0.1.0

Description A stack-based buffer overflow occurs in the raw to header() function within src/microtar.c. The issue arises because the function uses strcpy() to copy 100-byte name and linkname fields from a TAR header without ensuring the source is null-terminated. Since the POSIX ustar format allows these fixed-width fields to be fully populated with non-null bytes, a specially crafted archive can cause strcpy() to read beyond the 512-byte raw header stack buffer and write past the destination header buffer. A remote attacker can trigger this out-of-bounds read and stack overflow by providing a malicious TAR archive that is processed via mtar open(), mtar read header(), or mtar find(), potentially leading to a denial of service (crash) or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.