CVE-2025-46394 Information

Description

In tar in BusyBox through 1.37.0 a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

Reference

http://www.openwall.com/lists/oss-security/2025/04/23/5 https://bugs.busybox.net/show_bug.cgi?id=16018 https://www.busybox.net https://www.busybox.net/downloads/