PT-2026-43166 · Bingos · Archive Tar
Published
2026-05-26
·
Updated
2026-05-26
·
CVE-2026-9538
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.
read tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.
A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Archive Tar