Vulnerability Description
A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy without guaranteeing null termination of the source.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/rxi/microtar
- https://github.com/rxi/microtar/blob/master/src/microtar.c#L111
- https://raw.githubusercontent.com/rxi/microtar/master/src/microtar.c
FAQ
What is CVE-2026-55738?
CVE-2026-55738 is a vulnerability with a CVSS score of 8.8 (HIGH). A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0. The function copies the 100-byte name and linkname fields of a TAR header with strcpy withou...
How severe is CVE-2026-55738?
CVE-2026-55738 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-55738?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.