PT-2026-31065 · Unknown+1 · Tar.Reader+1

Colin Walters + 2 · CVE-2026-32288 · Published 2026-04-07 · Updated 2026-07-30

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tar.Reader (affected versions not specified)

Description tar.Reader can allocate an unbounded amount of memory when processing a specially crafted archive containing numerous sparse regions encoded using the "old GNU sparse map" format. This can lead to excessive memory consumption and potentially cause a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-07247

BIT-GOLANG-2026-32288

CLEANSTART-2026-AP10784

CLEANSTART-2026-AP31842

CLEANSTART-2026-AP81049

CLEANSTART-2026-AR14847

CLEANSTART-2026-AR38431

CLEANSTART-2026-BG93699

CLEANSTART-2026-BJ92729

CLEANSTART-2026-BM78291

CLEANSTART-2026-CL67452

CLEANSTART-2026-CM33443

CLEANSTART-2026-CN27900

CLEANSTART-2026-CP01923

CLEANSTART-2026-DG85765

CLEANSTART-2026-DX24417

CLEANSTART-2026-EF68467

CLEANSTART-2026-EH11286

CLEANSTART-2026-EM89202

CLEANSTART-2026-EU52554

CLEANSTART-2026-FF85222

CLEANSTART-2026-GB38700

CLEANSTART-2026-GM82388

CLEANSTART-2026-GQ12922

CLEANSTART-2026-GY66569

CLEANSTART-2026-GZ11549

CLEANSTART-2026-HT21055

CLEANSTART-2026-IV00591

CLEANSTART-2026-JA94642

CLEANSTART-2026-JB18761

CLEANSTART-2026-JI51299

CLEANSTART-2026-JI93588

CLEANSTART-2026-JL47330

CLEANSTART-2026-JT15863

CLEANSTART-2026-JV11945

CLEANSTART-2026-KB08955

CLEANSTART-2026-KF61159

CLEANSTART-2026-KJ73757

CLEANSTART-2026-KT90792

CLEANSTART-2026-KX80654

CLEANSTART-2026-LA96053

CLEANSTART-2026-LC57158

CLEANSTART-2026-LD38774

CLEANSTART-2026-LG16061

CLEANSTART-2026-LO51673

CLEANSTART-2026-LO55919

CLEANSTART-2026-LY44407

CLEANSTART-2026-MA83809

CLEANSTART-2026-ME88121

CLEANSTART-2026-MI06133

CLEANSTART-2026-MJ94288

CLEANSTART-2026-MK41253

CLEANSTART-2026-MO33100

CLEANSTART-2026-MY03287

CLEANSTART-2026-MZ00063

CLEANSTART-2026-OF83437

CLEANSTART-2026-OG78440

CLEANSTART-2026-OH26633

CLEANSTART-2026-OH87240

CLEANSTART-2026-OI68686

CLEANSTART-2026-ON19155

CLEANSTART-2026-OO10146

CLEANSTART-2026-OV19069

CLEANSTART-2026-OY74734

CLEANSTART-2026-PH84276

CLEANSTART-2026-PQ10269

CLEANSTART-2026-PU75130

CLEANSTART-2026-PX55932

CLEANSTART-2026-QN79037

CLEANSTART-2026-QN97697

CLEANSTART-2026-QU97327

CLEANSTART-2026-RF77222

CLEANSTART-2026-RF96040

CLEANSTART-2026-RT07393

CLEANSTART-2026-RT37134

CLEANSTART-2026-SA78596

CLEANSTART-2026-SA81922

CLEANSTART-2026-SF49994

CLEANSTART-2026-SP45896

CLEANSTART-2026-SP73148

CLEANSTART-2026-SQ76279

CLEANSTART-2026-SW10568

CLEANSTART-2026-SY48547

CLEANSTART-2026-TE81995

CLEANSTART-2026-UC73978

CLEANSTART-2026-UI27816

CLEANSTART-2026-UM67329

CLEANSTART-2026-UO11850

CLEANSTART-2026-UR38994

CLEANSTART-2026-UV44486

CLEANSTART-2026-UY68298

CLEANSTART-2026-VA62549

CLEANSTART-2026-VE68915

CLEANSTART-2026-VN16911

CLEANSTART-2026-VR76068

CLEANSTART-2026-VX15911

CLEANSTART-2026-WE55349

CLEANSTART-2026-WW79343

CLEANSTART-2026-XC13942

CLEANSTART-2026-XI63678

CLEANSTART-2026-XK25146

CLEANSTART-2026-XR35583

CLEANSTART-2026-XS86531

CLEANSTART-2026-XV43582

CLEANSTART-2026-XV65906

CLEANSTART-2026-YB92538

CLEANSTART-2026-YE67255

CLEANSTART-2026-YG71543

CLEANSTART-2026-YT82900

CLEANSTART-2026-YY48565

CLEANSTART-2026-ZF00349

CLEANSTART-2026-ZK75486

CLEANSTART-2026-ZN46983

CLEANSTART-2026-ZW09225

CVE-2026-32288

GO-2026-4869

OESA-2026-2247

OESA-2026-2248

OESA-2026-2249

OESA-2026-2250

OESA-2026-2251

OPENSUSE-SU-2026:10514-1

OPENSUSE-SU-2026:10525-1

OPENSUSE-SU-2026:20570-1

OPENSUSE-SU-2026:20571-1

OPENSUSE-SU-2026:20703-1

OPENSUSE-SU-2026:21254-1

OPENSUSE-SU-2026:21319-1

OPENSUSE-SU-2026:21483-1

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2026:1320-1

SUSE-SU-2026:1321-1

SUSE-SU-2026:1580-1

SUSE-SU-2026:1581-1

SUSE-SU-2026:21355-1

SUSE-SU-2026:21356-1

SUSE-SU-2026:22572-1

SUSE-SU-2026:22638-1

Affected Products

Red Os

Tar.Reader

References · 2370

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32288.json · Exploit
• https://osv.dev/vulnerability/CLEANSTART-2026-GQ12922 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-MK41253 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-WW79343 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-OY74734 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-UC73978 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-SW10568 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-ZF00349 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27142 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-MI06133 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-OH87240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68121 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20570-1 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-DG85765 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-OG78440 · Vendor Advisory