CVE-2026-71267

Name of the Vulnerable Software and Affected Versions microtar (affected versions not specified)

Description The mtar write file header() and mtar write dir header() functions in src/microtar.c contain a stack buffer overflow. This occurs because a caller-supplied entry name is copied into the 100-byte name field of a stack-allocated mtar header t using strcpy(h.name, name) without verifying that the length of the name variable is less than 100 characters. Applications that use these functions to archive filenames influenced by external users or attackers longer than 99 characters can trigger this overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.