CVE-2026-78322

Name of the Vulnerable Software and Affected Versions file-roller (affected versions not specified)

Description A flaw exists when opening or extracting malicious 7z or RAR archives containing a file entry with an excessively long path. The progress-line parsing mechanism copies the path into a fixed-size stack buffer using an unbounded string copy, which can trigger a stack buffer overflow. This leads to the application terminating and results in a denial of service. An attacker can exploit this by tricking a victim into opening or extracting a specially crafted archive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.