Vulnerability in GNU Tar PAX leading to Excessive Memory Allocation

CVE-2025-58183

What is CVE-2025-58183?

The GNU tar pax 1.0 implementation has a vulnerability that allows a specially crafted archive with numerous sparse regions to cause excessive memory consumption. When a Reader processes such an archive, it can lead to unlimited data being loaded into memory, especially problematic during the reading of compressed sources. This could result in significant performance degradation or even application crashes due to memory exhaustion.

References