CVE-2026-43623
microtar 0.1.0 Stack-Based Buffer Overflow via raw_to_header()
Description
microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src/microtar.c that allows attackers to corrupt adjacent stack memory by supplying a crafted TAR archive with non-null-terminated name or linkname fields. The function uses strcpy() to copy 100-byte ustar format fields that lack null terminators, causing writes of up to 355 bytes into a 100-byte destination buffer when mtar_open(), mtar_find(), or mtar_read_header() process attacker-supplied TAR archives.
INFO
Published Date :
June 1, 2026, 7:16 p.m.
Last Modified :
July 22, 2026, 7:10 a.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Affected Products
The following products are affected by CVE-2026-43623
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | 83251b91-4cc7-4094-a5c7-464a1b83ea10 | ||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 4.0 | HIGH | 83251b91-4cc7-4094-a5c7-464a1b83ea10 | ||||
| CVSS 4.0 | HIGH | [email protected] |
Solution
- Update microtar to a fixed version.
- Avoid processing untrusted TAR archives.
- Sanitize archive metadata before processing.
Public PoC/Exploit Available at Github
CVE-2026-43623 has a 1 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-43623.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-43623 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-43623
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
A drop-in implementation of TAR (PAX standard).
C Python CMake Shell Batchfile
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-43623 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-43623 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Jul. 22, 2026
Action Type Old Value New Value Added Translation Title: microtar de rxi, Description: microtar hasta la versión 0.1.0 contiene una vulnerabilidad de desbordamiento de búfer basado en pila en la función raw_to_header() en src/microtar.c que permite a los atacantes corromper la memoria adyacente de la pila al proporcionar un archivo TAR manipulado con campos name o linkname no terminados en nulo. La función utiliza strcpy() para copiar campos de formato ustar de 100 bytes que carecen de terminadores nulos, causando escrituras de hasta 355 bytes en un búfer de destino de 100 bytes cuando mtar_open(), mtar_find() o mtar_read_header() procesan archivos TAR proporcionados por el atacante. -
CVE Modified by [email protected]
Jul. 14, 2026
Action Type Old Value New Value Changed Affected [{'repo': 'https://github.com/rxi/microtar', 'vendor': 'rxi', 'product': 'microtar', 'versions': [{'status': 'affected', 'version': '0', 'versionType': 'semver', 'lessThanOrEqual': '0.1.0'}], 'defaultStatus': 'affected'}] [{'repo': 'https://github.com/rxi/microtar', 'vendor': 'rxi', 'product': 'microtar', 'versions': [{'status': 'affected', 'version': '0', 'versionType': 'semver', 'lessThanOrEqual': '0.1.0'}], 'packageURL': 'pkg:github/rxi/microtar', 'defaultStatus': 'affected'}] -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://github.com/rxi/microtar', 'vendor': 'rxi', 'product': 'microtar', 'versions': [{'status': 'affected', 'version': '0', 'versionType': 'semver', 'lessThanOrEqual': '0.1.0'}], 'defaultStatus': 'affected'}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-43623', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2026-06-02T15:38:38.723071Z'} -
New CVE Received by [email protected]
Jun. 01, 2026
Action Type Old Value New Value Added Tag unsupported-when-assigned Added Description microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src/microtar.c that allows attackers to corrupt adjacent stack memory by supplying a crafted TAR archive with non-null-terminated name or linkname fields. The function uses strcpy() to copy 100-byte ustar format fields that lack null terminators, causing writes of up to 355 bytes into a 100-byte destination buffer when mtar_open(), mtar_find(), or mtar_read_header() process attacker-supplied TAR archives. Added CVSS V4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CVSS V3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Added CWE CWE-121 Added Reference https://github.com/rxi/microtar/issues/28 Added Reference https://github.com/rxi/microtar/issues/29 Added Reference https://github.com/rxi/microtar/issues/30 Added Reference https://www.vulncheck.com/advisories/microtar-stack-based-buffer-overflow-via-raw-to-header