Report

tar src/buffer.c: strcpy into fixed header field can overflow via volume label

0cb23a6c-5f68-40cb-8ce6-61af5a20148d

GNU tar snapshot contains a volume-label writing path that copies an attacker-influenced string into a fixed-size tar header name field using strcpy without bounding, enabling buffer overflow/memory corruption.