GNU cpio could be made to crash or run programs if it opened a specially crafted file.