libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
{ "binaries": [ { "binary_name": "unrar", "binary_version": "1:5.3.2-1+deb9u1build0.16.04.1" } ] }