CVE-2026-33055: Tar Pax Size Conditional Overridecve-2026-33055-tar-pax-size-conditional-override
A tar parser checks if the base header size is zero before applying the PAX extended header size override. This causes an interpretation conflict (parser differential) with tools that unconditionally respect the PAX size override, which can be manipulated to conceal malicious entries. The PAX size, if present, should unconditionally override the base size.
