CVE Catalog
CVE-2017-12941
CriticalSummary
The libunrar.a library in UnRAR versions before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
Risk Assessment
This flaw may lead to unauthorized memory access, posing a risk of data leakage or application crashes.
Recommendation
It is recommended to update the UnRAR library to version 5.5.7 or later to mitigate this vulnerability.
Other vulnerabilities in libunrar.a
See all- CVE-2017-12942Critical
The libunrar.a library in versions before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
- CVE-2017-12940Critical
The libunrar.a library in versions prior to 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode function, which is called within Archive::ReadHeader15.
Original NVD description (English source)
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.