CVE-2026-32288

score

<0.1

cvss

5.5

epss

0.2%

published

2026-04-08

kev added

—

first seen

2026-10-21

tar.Reader contains a denial of service caused by unbounded memory allocation when reading malicious archives with many sparse regions in the old GNU sparse map format, letting attackers cause resource exhaustion, exploit requires crafted archive.