CVE-2026-54417 Details

An integer overflow vulnerability has been identified in the rxi microtar library version 0.1.0. The issue arises in the mtar_next() function, where the offset for the next record is calculated using 32-bit arithmetic. When the header size is a multiple of 512 and falls within a specific range, the addition wraps around, causing the function to seek back to the current record instead of advancing. This flaw can be exploited by a remote attacker using a crafted tar archive, leading to uncontrolled CPU consumption and an infinite loop, effectively causing a denial-of-service condition.