CVE-2026-71267 Details
Description
microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar_header_t via strcpy(h.name, name), with no check that strlen(name) is less than 100 before the copy.
A stack buffer overflow vulnerability exists in the microtar library, specifically within the mtar_write_file_header() and mtar_write_dir_header() functions. These functions, found in src/microtar.c, copy a user-supplied entry name into a 100-byte stack-allocated name field of the mtar_header_t structure using strcpy, without verifying that the length of the name is less than 100 bytes. This flaw allows for a buffer overflow when the functions are called with filenames longer than 99 characters, such as those provided by users or attackers when archiving files.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 5, 2026CISA-ADP
Assessed Aug 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/rxi/microtar | TuranSec | Vendor |
| https://github.com/rxi/microtar/blob/master/src/microtar.c | TuranSec | Source CodeVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | TuranSec |
Affected Products
| Product | Versions |
|---|---|
| microtar | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 10, 2026 | CVE Modified | TuranSec |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 5, 2026 | New CVE Received | TuranSec |