SEC.co
Emergency

By weakness (CWE)

CWE-170: related vulnerabilities

CVEs classified under CWE-170. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-55738HIGH 8.8

    CVE-2026-55738 is a stack buffer overflow vulnerability in rxi microtar 0.1.0, a lightweight TAR archive parsing library. The flaw exists in how the library handles TAR header fields that contain no null terminators. When a crafted TAR file is opened or parsed, an attacker can trigger out-of-bounds memory reads and writes that crash the application or potentially execute arbitrary code. The vulnerability requires user interaction (opening or parsing a malicious archive) but carries high risk due to the nature of memory corruption exploits.