Threat database

unarr versions up to and including 1.1.1 contain a heap-based out-of-bounds read vulnerability in the zip_parse_extra_fields() function due to an incorrect ZIP64 extra field length check. This flaw allows an attacker to craft a malicious ZIP archive with sentinel values and a truncated ZIP64 record that can cause the process to read beyond the heap buffer and crash.

unarr versions up to and including 1.1.1 contain an off-by-one heap-based buffer overflow vulnerability in the tar_get_name() function. This flaw can be triggered via the ar_entry_get_name() API by supplying a crafted TAR archive with a full ustar prefix and name, causing a NUL byte to be written past the allocated buffer, leading to heap corruption and potential process crash.