CVE-2026-55738

EUVD-2026-37712
A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 33.45%
Common Weakness Enumeration
References
https://github.com/rxi/microtar
https://github.com/rxi/microtar/blob/master/src/microtar.c#L111
https://raw.githubusercontent.com/rxi/microtar/master/src/microtar.c