CVE-2026-111273
CVE-2026-111273
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashing the process.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Weakness classification (CWE)
References
- hackmd.io/@haind-pwn/unarr-tar-zip-oob (technical-description)
- github.com/selmf/unarr/blob/b211040df83dee513362cdeb9bd87afa26fd5e38/tar/parse-… (technical-description)
- github.com/selmf/unarr (product)
- www.vulncheck.com/advisories/unarr-through-1.1.1-off-by-one-heap-buffer-overflo… (third-party-advisory)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
Frequently asked questions
- What is CVE-2026-111273?
- CVE-2026-111273 is a medium-severity vulnerability, classified under Off-by-one Error. CVSS score: 6.1/10. Published 2026-10-15.
- How severe is CVE-2026-111273?
- Medium severity. CVSS v3 base score is 6.1 out of 10.