{"id":"CVE-2026-46571","aliases":["AZL-106878","DEBIAN-CVE-2026-46571","EUVD-2026-94353","GHSA-52gr-j4pv-9pjh","MGASA-2026-0424","OESA-2026-3108","SUSE-SU-2026:3213-1","SUSE-SU-2026:3214-1","UBUNTU-CVE-2026-46571","USN-8554-1","openSUSE-SU-2026:11320-1","openSUSE-SU-2026:21484-1"],"status":"published","title":"CVE-2026-46571 affecting package ntfs-3g for versions less than 2022.10.3-5","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00132,"percentile":0.02785,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-07-15T12:00:00Z","modified":"2026-11-06T17:29:55Z","fixes":[{"ecosystem":"Azure Linux:3","package":"ntfs-3g","fixed_in":["2022.10.3-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ntfs-3g","fixed_in":["1:2022.10.3-1+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ntfs-3g","fixed_in":["1:2022.10.3-5+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ntfs-3g","fixed_in":["1:2026.7.7-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","fixed_in":["1:2021.8.22-3ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ntfs-3g","fixed_in":["1:2022.10.3-1.2ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"ntfs-3g","fixed_in":["1:2022.10.3-5ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-1+deb12u4"}]}],"versions":["1:2022.10.3-1","1:2022.10.3-1+deb12u1","1:2022.10.3-1+deb12u2","1:2022.10.3-1+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-5+deb13u2"}]}],"versions":["1:2022.10.3-5","1:2022.10.3-5+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2026.7.7-2"}]}],"versions":["1:2022.10.3-5","1:2026.2.25-1","1:2026.7.7-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.25-1.1.mga10"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-1.3.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4.oe2403sp1"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4.oe2403sp3"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4.oe2403sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.oe2003sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.oe2203sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2013.1.13AR.1-2ubuntu1","1:2013.1.13AR.1-2ubuntu2","1:2013.1.13AR.1-2ubuntu2+esm1","1:2013.1.13AR.1-2ubuntu2+esm2","1:2013.1.13AR.1-2ubuntu2+esm3","1:2013.1.13AR.1-2ubuntu2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2014.2.15AR.3-3","1:2015.3.14AR.1-1","1:2015.3.14AR.1-1build1","1:2015.3.14AR.1-1ubuntu0.1","1:2015.3.14AR.1-1ubuntu0.2","1:2015.3.14AR.1-1ubuntu0.3","1:2015.3.14AR.1-1ubuntu0.3+esm1","1:2015.3.14AR.1-1ubuntu0.3+esm2","1:2015.3.14AR.1-1ubuntu0.3+esm3","1:2015.3.14AR.1-1ubuntu0.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2016.2.22AR.2-2","1:2017.3.23-2","1:2017.3.23-2ubuntu0.18.04.1","1:2017.3.23-2ubuntu0.18.04.2","1:2017.3.23-2ubuntu0.18.04.3","1:2017.3.23-2ubuntu0.18.04.4","1:2017.3.23-2ubuntu0.18.04.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2017.3.23AR.3-3ubuntu1","1:2017.3.23AR.3-3ubuntu1.1","1:2017.3.23AR.3-3ubuntu1.2","1:2017.3.23AR.3-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2021.8.22-3ubuntu1.4"}]}],"versions":["1:2017.3.23AR.3-3ubuntu5","1:2017.3.23AR.3-3ubuntu6","1:2021.8.22-3ubuntu1","1:2021.8.22-3ubuntu1.1","1:2021.8.22-3ubuntu1.2","1:2021.8.22-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-1.2ubuntu3.2"}]}],"versions":["1:2022.10.3-1ubuntu1","1:2022.10.3-1.2ubuntu1","1:2022.10.3-1.2ubuntu2","1:2022.10.3-1.2ubuntu3","1:2022.10.3-1.2ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-5ubuntu1.1"}]}],"versions":["1:2022.10.3-5","1:2022.10.3-5build1","1:2022.10.3-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2021.8.22-3ubuntu1.4"}]}],"versions":["1:2017.3.23AR.3-3ubuntu5","1:2017.3.23AR.3-3ubuntu6","1:2021.8.22-3ubuntu1","1:2021.8.22-3ubuntu1.1","1:2021.8.22-3ubuntu1.2","1:2021.8.22-3ubuntu1.3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-1.2ubuntu3.2"}]}],"versions":["1:2022.10.3-1ubuntu1","1:2022.10.3-1.2ubuntu1","1:2022.10.3-1.2ubuntu2","1:2022.10.3-1.2ubuntu3","1:2022.10.3-1.2ubuntu3.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-5ubuntu1.1"}]}],"versions":["1:2022.10.3-5","1:2022.10.3-5build1","1:2022.10.3-5ubuntu1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-160000.4.1"}]}],"bundled":9}],"products":[{"vendor":"tuxera","product":"ntfs-3g"}],"references":[{"url":"https://github.com/tuxera/ntfs-3g/releases#release-2026.7.7","tags":["Release Notes","package"]},{"url":"https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-52gr-j4pv-9pjh","tags":["Mitigation","Patch","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46571","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46571.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-46571","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0424.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35940","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/15/6","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00300.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8554-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42617","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46570","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46572","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56136","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263213-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271102","tags":["report"]},{"url":"https://bugzilla.suse.com/1271103","tags":["report"]},{"url":"https://bugzilla.suse.com/1271104","tags":["report"]},{"url":"https://bugzilla.suse.com/1271105","tags":["report"]},{"url":"https://bugzilla.suse.com/1271106","tags":["report"]},{"url":"https://bugzilla.suse.com/1271107","tags":["report"]},{"url":"https://bugzilla.suse.com/1271108","tags":["report"]},{"url":"https://bugzilla.suse.com/1271109","tags":["report"]},{"url":"https://bugzilla.suse.com/1271110","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56136","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263214-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46571","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56136","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-46571","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-10-07T00:00:00Z","modified":"2026-10-07T14:29:19.317Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T13:46:55.086623Z"}],"euvd":[{"id":"EUVD-2026-94353","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-10-07T00:00:00Z","modified":"2026-10-07T14:29:19Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:35.509652Z"}],"nvd":[{"id":"CVE-2026-46571","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-10-07T14:17:10.98Z","modified":"2026-10-08T19:08:32.323Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:54.809359Z"}],"osv":[{"id":"CVE-2026-46571","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-10-07T00:00:00Z","modified":"2026-10-28T02:31:04.00601084Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:05.870292Z"},{"id":"DEBIAN-CVE-2026-46571","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-10-07T14:17:10.98Z","modified":"2026-11-06T17:29:55.824972629Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T18:00:26.717991Z"},{"id":"OESA-2026-3108","title":"ntfs-3g security update","description":"NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems.\r\n\r\nSecurity Fix(es):\n\n(CVE-2026-42616)\n\n(CVE-2026-42617)\n\n(CVE-2026-42618)\n\n(CVE-2026-46569)\n\n(CVE-2026-46570)\n\n(CVE-2026-46571)\n\n(CVE-2026-46572)\n\n(CVE-2026-56135)\n\n(CVE-2026-56136)","status":"published","published":"2026-07-24T11:11:59Z","modified":"2026-08-18T01:21:21.601295288Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"UBUNTU-CVE-2026-46571","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-07-15T12:00:00Z","modified":"2026-10-17T12:58:23.979625605Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:30.797112Z"},{"id":"AZL-106878","title":"CVE-2026-46571 affecting package ntfs-3g for versions less than 2022.10.3-5","description":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","status":"published","published":"2026-10-07T14:17:10Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.969374Z"},{"id":"MGASA-2026-0424","title":"Updated ntfs-3g packages fix security vulnerabilities","description":"Heap memory corruption when processing a corrupt or maliciously crafted\nfilesystem. (CVE-2026-42616)\nHeap memory corruption when copying index data from root to an index\nblock in a corrupt or maliciously crafted filesystem. (CVE-2026-42617)\nSingle-byte heap buffer overflow when decompressing maliciously crafted\ncompressed file data. (CVE-2026-42618)\nHeap buffer overflow when copying the tail data of an index block to a\nfreshly allocated block. (CVE-2026-46569)\nHeap memory corruption for maliciously crafted or corrupt index data\ndescending to an out-of-bounds tree depth. (CVE-2026-46570)\nOut-of-bounds read when processing symlink reparse data in a corrupt or\nmaliciously crafted filesystem. (CVE-2026-46571)\nHeap buffer overflow for maliciously crafted or corrupt index data\nduring a node split. (CVE-2026-46572)\nHeap buffer overflow when building inherited ACL data. (CVE-2026-56135)\nOut of bounds access when clearing an index root in maliciously crafted\nor corrupt index data. (CVE-2026-56136)\n","status":"published","published":"2026-09-20T04:25:32Z","modified":"2026-09-20T04:30:02.952614797Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11320-1","title":"libntfs-3g-devel-2022.10.3-8.1 on GA media","description":"These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-21T00:00:00Z","modified":"2026-07-22T09:30:07.450100581Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21484-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues:\n\n- CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a\n  specially crafted NTFS image (bsc#1271102).\n- CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root\n  ntfs-3g binary via a specially crafted NTFS image (bsc#1271103).\n- CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the\n  SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104).\n- CVE-2026-46569: heap buffer overflow in `ntfs_ib_copy_tail()` of `libntfs-3g/index.c`can lead to heap corruption in\n  the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271105).\n- CVE-2026-46570: heap buffer overflow in `ntfs_index_walk_down()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271106).\n- CVE-2026-46571: out-of-bounds read in `ntfs_fix_file_name()` of `libntfs-3g/reparse.c` can lead to disclosure of\n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271107).\n- CVE-2026-46572: heap buffer overflow in `ntfs_ib_cut_tail()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271108).\n- CVE-2026-56135: heap-based buffer overflow in `build_inherited_id()` of `libntfs-3g/security.c` can lead to heap\n  corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271109).\n- CVE-2026-56136: out-of-bounds read in `ntfs_ir_nill()` of `libntfs-3g/index.c` can lead to disclosure of\n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271110).\n","status":"published","published":"2026-07-30T09:09:28Z","modified":"2026-07-31T18:24:08.435474084Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:3213-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues\n\n- CVE-2026-42616: heap buffer overflow in cat() in cat.c (bsc#1271102).\n- CVE-2026-42617: heap buffer overflow in ntfs_ir_to_ib() in index.c (bsc#1271103).\n- CVE-2026-42618: heap buffer overflow in ntfs_decompress() in compress.c (bsc#1271104).\n- CVE-2026-46569: heap buffer overflow in ntfs_ib_copy_tail() in libntfs-3g/index.c (bsc#1271105).\n- CVE-2026-46570: heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c (bsc#1271106).\n- CVE-2026-46571: out-of-bounds read in ntfs_fix_file_name() in libntfs-3g/reparse.c (bsc#1271107).\n- CVE-2026-46572: heap buffer overflow in ntfs_ib_cut_tail() in libntfs-3g/index.c (bsc#1271108).\n- CVE-2026-56135: heap-based buffer overflow in build_inherited_id() in libntfs-3g/security.c (bsc#1271109).\n- CVE-2026-56136: out-of-bounds read in ntfs_ir_nill() in libntfs-3g/index.c (bsc#1271110).\n","status":"published","published":"2026-07-23T14:18:11Z","modified":"2026-07-24T17:16:04.974140337Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3214-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues\n\n- CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a\n  specially crafted NTFS image (bsc#1271102).\n- CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root\n  ntfs-3g binary via a specially crafted NTFS image (bsc#1271103).\n- CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the\n  SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104).\n- CVE-2026-46569: heap buffer overflow in `ntfs_ib_copy_tail()` of `libntfs-3g/index.c`can lead to heap corruption in\n  the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271105).\n- CVE-2026-46570: heap buffer overflow in `ntfs_index_walk_down()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271106).\n- CVE-2026-46571: out-of-bounds read in `ntfs_fix_file_name()` of `libntfs-3g/reparse.c` can lead to disclosure of\n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271107).\n- CVE-2026-46572: heap buffer overflow in `ntfs_ib_cut_tail()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271108).\n- CVE-2026-56135: heap-based buffer overflow in `build_inherited_id()` of `libntfs-3g/security.c` can lead to heap\n  corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271109).\n- CVE-2026-56136: out-of-bounds read in `ntfs_ir_nill()` of `libntfs-3g/index.c` can lead to disclosure of \n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271110).\n","status":"published","published":"2026-07-23T14:18:48Z","modified":"2026-07-24T17:16:04.977542929Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8554-1","title":"ntfs-3g vulnerabilities","description":"It was discovered that NTFS-3G had a heap buffer overflow when reading\ncertain NTFS images. A local attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-42616)\n\nIt was discovered that NTFS-3G had multiple heap buffer overflows when\nprocessing certain NTFS images. A local attacker could possibly use these\nissues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618,\nCVE-2026-46569, CVE-2026-46570, CVE-2026-46572, CVE-2026-56135)\n\nIt was discovered that NTFS-3G had out-of-bounds reads when processing\ncertain NTFS images. A local attacker could possibly use these issues to\nobtain sensitive information. (CVE-2026-46571, CVE-2026-56136)","status":"published","published":"2026-07-16T11:44:54Z","modified":"2026-10-22T10:30:04.400272689Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}