Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

microtar: Stack Buffer Overflow in Filename Handling

CVE-2026-71267 · published 1 month ago
Summary

The microtar library has a bug that can cause a crash when handling very long filenames. This bug can be exploited by an attacker to make the program crash or execute malicious code. To fix this, update the microtar library to a version that has this issue resolved.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
rxi microtar <= *
Original advisory text
microtar Stack Buffer Overflow in mtar_write_file_header() and mtar_write_dir_header()
microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar_header_t via strcpy(h.name, name), with no check that strlen(name) is less than 100 before the copy.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (NVD)
Exploitation
EPSS <1%
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published5 Aug 2026
Updated2 Sep 2026
First seen5 Aug 2026
Sources
CVE-2026-71267 · NVD
CVE-2026-71267 · MITRE
Monitor software like this
Free during beta