THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-54417 (HIGH 7.5) — An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next computes the offset to the next record as round_up(h.siz

[NVD] CVE-2026-54417 (HIGH 7.5) — An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next computes the offset to the next record as round_up(h.siz

lownvdPublished 2026-06-17

CVE-2026-54417 CVSS: 7.5 HIGH Published: 2026-06-17T14:17:58.540

An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next computes the offset to the next record as round_up(h.size, 512) + sizeof(mtar_raw_header_t) using 32-bit arith

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54417