In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
{ "urgency": "not yet assigned" }