3.2
Low
CVE-2025-46394 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal…
Description
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| busybox 1.37 | earliest → 1.37.0 | No fix stated |
| RUGGEDCOM RST2428P 4.0 | earliest → < 4.0 | 4.0 |
References
- bugs.busybox.net bugs.busybox.net
- www.busybox.net www.busybox.net
- www.busybox.net www.busybox.net
Timeline
- Published
- Last modified
Other CVEs of busybox
The 21 CVEs of busybox →
CVE-2026-92205
BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
6.1
Medium
CVE-2026-38753
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of…
4.9
Medium
CVE-2026-38752
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a…
2.9
Low
CVE-2026-38754
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of…
5.1
Medium