FlawAtlas
Search the atlas
CVE-2026-32288 Moderate

Unbounded allocation for old GNU sparse in archive/tar

tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.

Exploit probability 0.3%
Published April 13, 2026
Required by Not available
Last source change April 17, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

150 explicit affected versions

Go stdlib
Bitnami golang

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities GO-2026-4869

tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.

View original source
Open Source Vulnerabilities BIT-golang-2026-32288

tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.

View original source
Open Source Vulnerabilities CVE-2026-32288

tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.

View original source

05 / REFERENCES

Further evidence