{"id":"CVE-2026-56136","aliases":["AZL-97929","CLSA-2026-1792659106","DEBIAN-CVE-2026-56136","EUVD-2026-65148","GHSA-r66g-c39x-cw95","MGASA-2026-0424","OESA-2026-3108","SUSE-SU-2026:3213-1","SUSE-SU-2026:3214-1","UBUNTU-CVE-2026-56136","USN-8554-1","openSUSE-SU-2026:11320-1","openSUSE-SU-2026:21484-1"],"status":"published","title":"CVE-2026-56136 affecting package ntfs-3g for versions less than 2022.10.3-4","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00122,"percentile":0.01999,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-07-15T12:00:00Z","modified":"2026-11-06T17:30:06Z","fixes":[{"ecosystem":"Azure Linux:3","package":"ntfs-3g","fixed_in":["2022.10.3-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ntfs-3g","fixed_in":["1:2022.10.3-1+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ntfs-3g","fixed_in":["1:2022.10.3-5+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ntfs-3g","fixed_in":["1:2026.7.7-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","fixed_in":["1:2021.8.22-3ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ntfs-3g","fixed_in":["1:2022.10.3-1.2ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"ntfs-3g","fixed_in":["1:2022.10.3-5ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libntfs-3g88","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.5+tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.5+tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ntfs-3g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.3.23-2ubuntu0.18.04.5+tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-1+deb12u4"}]}],"versions":["1:2022.10.3-1","1:2022.10.3-1+deb12u1","1:2022.10.3-1+deb12u2","1:2022.10.3-1+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-5+deb13u2"}]}],"versions":["1:2022.10.3-5","1:2022.10.3-5+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2026.7.7-2"}]}],"versions":["1:2022.10.3-5","1:2026.2.25-1","1:2026.7.7-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.25-1.1.mga10"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-1.3.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4.oe2403sp1"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4.oe2403sp3"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-4.oe2403sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.oe2003sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.oe2203sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-5.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.5.17-150000.3.27.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2013.1.13AR.1-2ubuntu1","1:2013.1.13AR.1-2ubuntu2","1:2013.1.13AR.1-2ubuntu2+esm1","1:2013.1.13AR.1-2ubuntu2+esm2","1:2013.1.13AR.1-2ubuntu2+esm3","1:2013.1.13AR.1-2ubuntu2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2014.2.15AR.3-3","1:2015.3.14AR.1-1","1:2015.3.14AR.1-1build1","1:2015.3.14AR.1-1ubuntu0.1","1:2015.3.14AR.1-1ubuntu0.2","1:2015.3.14AR.1-1ubuntu0.3","1:2015.3.14AR.1-1ubuntu0.3+esm1","1:2015.3.14AR.1-1ubuntu0.3+esm2","1:2015.3.14AR.1-1ubuntu0.3+esm3","1:2015.3.14AR.1-1ubuntu0.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2016.2.22AR.2-2","1:2017.3.23-2","1:2017.3.23-2ubuntu0.18.04.1","1:2017.3.23-2ubuntu0.18.04.2","1:2017.3.23-2ubuntu0.18.04.3","1:2017.3.23-2ubuntu0.18.04.4","1:2017.3.23-2ubuntu0.18.04.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2017.3.23AR.3-3ubuntu1","1:2017.3.23AR.3-3ubuntu1.1","1:2017.3.23AR.3-3ubuntu1.2","1:2017.3.23AR.3-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2021.8.22-3ubuntu1.4"}]}],"versions":["1:2017.3.23AR.3-3ubuntu5","1:2017.3.23AR.3-3ubuntu6","1:2021.8.22-3ubuntu1","1:2021.8.22-3ubuntu1.1","1:2021.8.22-3ubuntu1.2","1:2021.8.22-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-1.2ubuntu3.2"}]}],"versions":["1:2022.10.3-1ubuntu1","1:2022.10.3-1.2ubuntu1","1:2022.10.3-1.2ubuntu2","1:2022.10.3-1.2ubuntu3","1:2022.10.3-1.2ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-5ubuntu1.1"}]}],"versions":["1:2022.10.3-5","1:2022.10.3-5build1","1:2022.10.3-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2021.8.22-3ubuntu1.4"}]}],"versions":["1:2017.3.23AR.3-3ubuntu5","1:2017.3.23AR.3-3ubuntu6","1:2021.8.22-3ubuntu1","1:2021.8.22-3ubuntu1.1","1:2021.8.22-3ubuntu1.2","1:2021.8.22-3ubuntu1.3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-1.2ubuntu3.2"}]}],"versions":["1:2022.10.3-1ubuntu1","1:2022.10.3-1.2ubuntu1","1:2022.10.3-1.2ubuntu2","1:2022.10.3-1.2ubuntu3","1:2022.10.3-1.2ubuntu3.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2022.10.3-5ubuntu1.1"}]}],"versions":["1:2022.10.3-5","1:2022.10.3-5build1","1:2022.10.3-5ubuntu1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ntfs-3g_ntfsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.10.3-160000.4.1"}]}],"bundled":9}],"products":[{"vendor":"tuxera","product":"ntfs-3g"}],"references":[{"url":"https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-r66g-c39x-cw95","tags":["Patch","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56136","tags":["web","advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1792659106.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42617","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46570","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46572","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56136.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-56136","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0424.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35940","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/15/6","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00300.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8554-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46571","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56135","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263213-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271102","tags":["report"]},{"url":"https://bugzilla.suse.com/1271103","tags":["report"]},{"url":"https://bugzilla.suse.com/1271104","tags":["report"]},{"url":"https://bugzilla.suse.com/1271105","tags":["report"]},{"url":"https://bugzilla.suse.com/1271106","tags":["report"]},{"url":"https://bugzilla.suse.com/1271107","tags":["report"]},{"url":"https://bugzilla.suse.com/1271108","tags":["report"]},{"url":"https://bugzilla.suse.com/1271109","tags":["report"]},{"url":"https://bugzilla.suse.com/1271110","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56136","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263214-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-56136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56135","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-56136","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-28T16:20:11.948Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T13:37:02.780526Z"}],"euvd":[{"id":"EUVD-2026-65148","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-28T16:20:11Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:23.104802Z"}],"nvd":[{"id":"CVE-2026-56136","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-08-24T21:17:42.38Z","modified":"2026-10-14T15:54:15.877Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:41.018848Z"}],"osv":[{"id":"CVE-2026-56136","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-10-28T02:30:24.160359828Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:11.609219Z"},{"id":"DEBIAN-CVE-2026-56136","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-08-24T21:17:42.38Z","modified":"2026-11-06T17:30:06.563801799Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T18:00:26.717991Z"},{"id":"OESA-2026-3108","title":"ntfs-3g security update","description":"NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems.\r\n\r\nSecurity Fix(es):\n\n(CVE-2026-42616)\n\n(CVE-2026-42617)\n\n(CVE-2026-42618)\n\n(CVE-2026-46569)\n\n(CVE-2026-46570)\n\n(CVE-2026-46571)\n\n(CVE-2026-46572)\n\n(CVE-2026-56135)\n\n(CVE-2026-56136)","status":"published","published":"2026-07-24T11:11:59Z","modified":"2026-08-18T01:21:21.601295288Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"UBUNTU-CVE-2026-56136","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-07-15T12:00:00Z","modified":"2026-08-31T17:16:42.923798833Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:41.382716Z"},{"id":"AZL-97929","title":"CVE-2026-56136 affecting package ntfs-3g for versions less than 2022.10.3-4","description":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","status":"published","published":"2026-08-24T21:17:42Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.280152Z"},{"id":"CLSA-2026-1792659106","title":"Fix of 6 CVEs","description":"   * SECURITY UPDATE: heap buffer overflows and out-of-bounds read in index\n     handling\n     - debian/patches/CVE-2026-42617_CVE-2026-46572_CVE-2026-56136.patch:\n       validate the index entry stream and INDEX_ROOT.index_block_size read\n       from disk, and check the size copied from the index root to the new\n       index block in ntfs_ir_to_ib(), in include/ntfs-3g/index.h,\n       libntfs-3g/attrib.c and libntfs-3g/index.c.\n     - CVE-2026-42617\n     - CVE-2026-46572\n     - CVE-2026-56136\n   * SECURITY UPDATE: heap buffer overflow in index block split\n     - debian/patches/CVE-2026-46569.patch: bound tail_size against the\n       destination block capacity in ntfs_ib_copy_tail() in\n       libntfs-3g/index.c.\n     - CVE-2026-46569\n   * SECURITY UPDATE: out-of-bounds write when walking a deep index\n     - debian/patches/CVE-2026-46570.patch: limit the B-tree depth to\n       MAX_PARENT_VCN in ntfs_index_walk_down() in libntfs-3g/index.c.\n     - CVE-2026-46570\n   * Fix double free when an index entry is too long to hold a VCN\n     - debian/patches/index-reject-entry-too-long-for-vcn.patch: reject an\n       index entry that is too long to hold a VCN in ntfs_ie_add_vcn() in\n       libntfs-3g/index.c, as its 16-bit length would wrap to zero.\n   * SECURITY UPDATE: heap buffer overflow in LZNT1 decompression\n     - debian/patches/CVE-2026-42618.patch: end a sub-block when its output\n       is full and check the input bounds before reading sub-block headers\n       and phrase tokens in ntfs_decompress() in libntfs-3g/compress.c, and\n       zero the unused part of the output when the compressed data is garbled.\n     - CVE-2026-42618\n   * SECURITY UPDATE: heap buffer overflow in ntfscat\n     - debian/patches/CVE-2026-42616.patch: size the read buffer from the\n       block size in cat() in ntfsprogs/ntfscat.c.\n     - CVE-2026-42616","status":"published","published":"2026-10-22T08:52:01Z","modified":"2026-10-26T09:43:17.103678597Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"MGASA-2026-0424","title":"Updated ntfs-3g packages fix security vulnerabilities","description":"Heap memory corruption when processing a corrupt or maliciously crafted\nfilesystem. (CVE-2026-42616)\nHeap memory corruption when copying index data from root to an index\nblock in a corrupt or maliciously crafted filesystem. (CVE-2026-42617)\nSingle-byte heap buffer overflow when decompressing maliciously crafted\ncompressed file data. (CVE-2026-42618)\nHeap buffer overflow when copying the tail data of an index block to a\nfreshly allocated block. (CVE-2026-46569)\nHeap memory corruption for maliciously crafted or corrupt index data\ndescending to an out-of-bounds tree depth. (CVE-2026-46570)\nOut-of-bounds read when processing symlink reparse data in a corrupt or\nmaliciously crafted filesystem. (CVE-2026-46571)\nHeap buffer overflow for maliciously crafted or corrupt index data\nduring a node split. (CVE-2026-46572)\nHeap buffer overflow when building inherited ACL data. (CVE-2026-56135)\nOut of bounds access when clearing an index root in maliciously crafted\nor corrupt index data. (CVE-2026-56136)\n","status":"published","published":"2026-09-20T04:25:32Z","modified":"2026-09-20T04:30:02.952614797Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11320-1","title":"libntfs-3g-devel-2022.10.3-8.1 on GA media","description":"These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-21T00:00:00Z","modified":"2026-07-22T09:30:07.450100581Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21484-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues:\n\n- CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a\n  specially crafted NTFS image (bsc#1271102).\n- CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root\n  ntfs-3g binary via a specially crafted NTFS image (bsc#1271103).\n- CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the\n  SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104).\n- CVE-2026-46569: heap buffer overflow in `ntfs_ib_copy_tail()` of `libntfs-3g/index.c`can lead to heap corruption in\n  the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271105).\n- CVE-2026-46570: heap buffer overflow in `ntfs_index_walk_down()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271106).\n- CVE-2026-46571: out-of-bounds read in `ntfs_fix_file_name()` of `libntfs-3g/reparse.c` can lead to disclosure of\n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271107).\n- CVE-2026-46572: heap buffer overflow in `ntfs_ib_cut_tail()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271108).\n- CVE-2026-56135: heap-based buffer overflow in `build_inherited_id()` of `libntfs-3g/security.c` can lead to heap\n  corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271109).\n- CVE-2026-56136: out-of-bounds read in `ntfs_ir_nill()` of `libntfs-3g/index.c` can lead to disclosure of\n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271110).\n","status":"published","published":"2026-07-30T09:09:28Z","modified":"2026-07-31T18:24:08.435474084Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:3213-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues\n\n- CVE-2026-42616: heap buffer overflow in cat() in cat.c (bsc#1271102).\n- CVE-2026-42617: heap buffer overflow in ntfs_ir_to_ib() in index.c (bsc#1271103).\n- CVE-2026-42618: heap buffer overflow in ntfs_decompress() in compress.c (bsc#1271104).\n- CVE-2026-46569: heap buffer overflow in ntfs_ib_copy_tail() in libntfs-3g/index.c (bsc#1271105).\n- CVE-2026-46570: heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c (bsc#1271106).\n- CVE-2026-46571: out-of-bounds read in ntfs_fix_file_name() in libntfs-3g/reparse.c (bsc#1271107).\n- CVE-2026-46572: heap buffer overflow in ntfs_ib_cut_tail() in libntfs-3g/index.c (bsc#1271108).\n- CVE-2026-56135: heap-based buffer overflow in build_inherited_id() in libntfs-3g/security.c (bsc#1271109).\n- CVE-2026-56136: out-of-bounds read in ntfs_ir_nill() in libntfs-3g/index.c (bsc#1271110).\n","status":"published","published":"2026-07-23T14:18:11Z","modified":"2026-07-24T17:16:04.974140337Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3214-1","title":"Security update for ntfs-3g_ntfsprogs","description":"This update for ntfs-3g_ntfsprogs fixes the following issues\n\n- CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a\n  specially crafted NTFS image (bsc#1271102).\n- CVE-2026-42617: heap buffer overflow in `ntfs_ir_to_ib()` of `index.c` can lead to heap corruption in the SUID-root\n  ntfs-3g binary via a specially crafted NTFS image (bsc#1271103).\n- CVE-2026-42618: heap buffer overflow in `ntfs_decompress()` of `compress.c` can lead to heap corruption in the\n  SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271104).\n- CVE-2026-46569: heap buffer overflow in `ntfs_ib_copy_tail()` of `libntfs-3g/index.c`can lead to heap corruption in\n  the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271105).\n- CVE-2026-46570: heap buffer overflow in `ntfs_index_walk_down()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271106).\n- CVE-2026-46571: out-of-bounds read in `ntfs_fix_file_name()` of `libntfs-3g/reparse.c` can lead to disclosure of\n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271107).\n- CVE-2026-46572: heap buffer overflow in `ntfs_ib_cut_tail()` of `libntfs-3g/index.c` can lead to heap corruption\n  in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271108).\n- CVE-2026-56135: heap-based buffer overflow in `build_inherited_id()` of `libntfs-3g/security.c` can lead to heap\n  corruption in the SUID-root ntfs-3g binary via a specially crafted NTFS image (bsc#1271109).\n- CVE-2026-56136: out-of-bounds read in `ntfs_ir_nill()` of `libntfs-3g/index.c` can lead to disclosure of \n  confidential information from the ntfs-3g process memory when handling a specially crafted NTFS image (bsc#1271110).\n","status":"published","published":"2026-07-23T14:18:48Z","modified":"2026-07-24T17:16:04.977542929Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8554-1","title":"ntfs-3g vulnerabilities","description":"It was discovered that NTFS-3G had a heap buffer overflow when reading\ncertain NTFS images. A local attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-42616)\n\nIt was discovered that NTFS-3G had multiple heap buffer overflows when\nprocessing certain NTFS images. A local attacker could possibly use these\nissues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618,\nCVE-2026-46569, CVE-2026-46570, CVE-2026-46572, CVE-2026-56135)\n\nIt was discovered that NTFS-3G had out-of-bounds reads when processing\ncertain NTFS images. A local attacker could possibly use these issues to\nobtain sensitive information. (CVE-2026-46571, CVE-2026-56136)","status":"published","published":"2026-07-16T11:44:54Z","modified":"2026-10-22T10:30:04.400272689Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}