The vulnerability in microtar (<=0.1.0) is a stack-based buffer overflow in the raw_to_header() function located in src/microtar.c. It arises from the use of strcpy() to copy ustar format fields (name or linkname) that are 100 bytes long but may lack null terminators. When processing attacker-supplied TAR archives with non-null-terminated fields, the function can write up to 355 bytes into a 100-byte stack buffer, corrupting adjacent memory. This affects the functions mtar_open(), mtar_find(), and mtar_read_header().

Successful exploitation can lead to corruption of adjacent stack memory, potentially causing crashes or arbitrary code execution. The vulnerability is remotely exploitable without privileges or user interaction, increasing risk. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, and user interaction needed, with high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Users should avoid processing untrusted TAR archives with affected microtar versions until a patch is available.