libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
{ "binaries": [ { "binary_name": "unrar", "binary_version": "1:5.3.2-1+deb9u1build0.16.04.1" } ] }