medium5.5
CVE-2026-32288
tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "ol…
Impact
tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Golang | Go | before 1.25.9 from 1.26.0 before 1.26.2 |