← Vulnerability feed

Vulnerability record · CVE-2017-12940 · published 18 August 2017

CVE-2017-12940: Rarlab unrar out-of-bounds read vulnerability

Rarlab · Unrar

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.

9.8 CVSS 3.0 Critical EPSS 2.2% · top 18.2% CWE-125 · Out-of-bounds read
9.8CVSS 3.0 base score, v2 7.5
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://seclists.org/oss-sec/2017/q3/290 ExploitMailing ListThird Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10241
https://security.gentoo.org/glsa/201709-24
http://seclists.org/oss-sec/2017/q3/290 ExploitMailing ListThird Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10241
https://security.gentoo.org/glsa/201709-24

Track CVE-2017-12940 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2022-30333UnRAR path traversal allows arbitrary file write on Linux and UNIXRARLAB UnRAR before 6.12 on Linux and UNIX fails to properly sanitize paths during extraction, allowing directory traversal writes outside the intend…KEVEPSS 99%analysed9.8CVE-2017-12941Rarlab unrar out-of-bounds read vulnerabilitylibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.EPSS 2.2%9.8CVE-2017-12942Rarlab unrar memory buffer overflow vulnerabilitylibunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.EPSS 2.3%9.8CVE-2012-6706Sophos threat detection engine integer overflow vulnerabilityA VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other pro…EPSS 10%9.1CVE-2017-14122Rarlab unrar out-of-bounds read vulnerabilityunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.EPSS 1.8%7.8CVE-2017-20006Rarlab unrar out-of-bounds write vulnerabilityUnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).EPSS 1.2%7.8CVE-2018-25018Rarlab unrar out-of-bounds write vulnerabilityUnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.EPSS 1.3%7.5CVE-2022-48579Rarlab unrar link following vulnerabilityUnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.EPSS 0.84%

Source: NIST National Vulnerability Database (record CVE-2017-12940), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.