CVE-2017-12940

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libunrar.a library in versions prior to 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode function, which is called within Archive::ReadHeader15.

Risk Assessment

This flaw may lead to unauthorized memory access, posing a risk of data leakage or application crashes.

Recommendation

It is recommended to update the libunrar.a library to version 5.5.7 or later to mitigate this vulnerability.

Original NVD description (English source)

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.