CVE Watch16 oct 2026

CVE-2026-111273

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_g

CVSS

6.1

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 15 oct 2026 · Última mod.: 16 oct 2026 · CWE-193

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-162026-10-19

Descripción técnica

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashing the process.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-127274.3 MED

—

——0IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.19h CVE-2026-1084438.8 ALT

37.0%

——11Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.19h CVE-2026-1013026.5 MED

33.9%

——10TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer dereference, causing a kernel panic. A remote TLS 1.3 peer can send a specially crafted record to trigger a kernel panic, resulting in a Denial of Service (DoS).16h CVE-2026-1106043.6 BAJ

11.8%

——4Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the process.6d CVE-2026-977418.8 ALT

55.2%

——17Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.5d CVE-2026-1028578.8 ALT

55.2%

——17Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.5d