Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: selmf Clear all filters
TI-2026-75056 CVE-2026-111274 · GHSA-rj75-52m6-37p5

Heap out-of-bounds read in unarr ZIP extra field parsing

Priority MEDIUM 63

unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00196 Published 2026-10-15 No fix listed CWE-125
TI-2026-75055 CVE-2026-111273 · GHSA-2v49-qr2f-xxxp

Off-by-one heap buffer overflow in unarr TAR name parsing

Priority MEDIUM 64

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00209 Published 2026-10-15 No fix listed CWE-193