Skip to content
OpenAdvisories

Vendor

junrar

4 known vulnerabilities.

Products

junrar 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-97370

    Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

    Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VM_JMP instruction whose target is greater than or equal to the prepared program's codeSize. …

    junrar junrar com.github.junrar:junrar Maven