Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111273— unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name

Quick assessment

Affected
selmf unarr
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

unarr 1.1.1 版本中存在一个基于堆的缓冲区溢出漏洞（off-by-one error），位于 文件中的 函数内，该漏洞可通过 API 触发。攻击者可构造一个包含完整 ustar 前缀和名称的恶意 TAR 归档文件，导致向已分配内存边界之外写入空字节（NUL），从而破坏堆内存并引发程序崩溃。

CVSS 6.1 · Medium

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111273

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name
Source: CVE Program / CVE List V5
Vulnerability Description
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashing the process.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
Off-by-one错误
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
selmf unarr 0 ~ 1.1.1 -

II. Public POCs for CVE-2026-111273

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111273

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-111273 (1)

Proof of Concept for CVE-2026-111273 (1)

Security Blog Posts for CVE-2026-111273 (1)

Vendor Pages for CVE-2026-111273 (1)

IV. Related Vulnerabilities

Same product: unarr
Same vendor: selmf
Same weakness: CWE-193

V. Comments for CVE-2026-111273

No comments yet

Leave a comment