{"id":"MGASA-2026-0482","aliases":[],"status":"published","title":"Updated ntfs-3g package fixes security vulnerabilities","description":"Heap buffer overflow in ntfs_acl_owner()\nHeap buffer overflow in ntfs_same_sid()\nDenial-of-service in ntfs_inode_attach_all_extents()\nHeap buffer overflow in ntfs_check_restart_area()\nHeap buffer overflow in ntfs_ea_check_wsldev()\nHeap buffer overflow in ntfs_external_attr_find()\nHeap data corruption in ntfs_mapping_pairs_decompress_i()\nHeap out of bounds read/write in ntfs_ie_add_vcn()","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-12T18:47:12Z","modified":"2026-10-12T19:00:45Z","fixes":[{"ecosystem":"Mageia:10","package":"ntfs-3g","fixed_in":["2026.2.25-1.2.mga10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:10","package":"ntfs-3g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.25-1.2.mga10"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2026-0482.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36366","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/09/23/4","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2026-0482","title":"Updated ntfs-3g package fixes security vulnerabilities","description":"Heap buffer overflow in ntfs_acl_owner()\nHeap buffer overflow in ntfs_same_sid()\nDenial-of-service in ntfs_inode_attach_all_extents()\nHeap buffer overflow in ntfs_check_restart_area()\nHeap buffer overflow in ntfs_ea_check_wsldev()\nHeap buffer overflow in ntfs_external_attr_find()\nHeap data corruption in ntfs_mapping_pairs_decompress_i()\nHeap out of bounds read/write in ntfs_ie_add_vcn()\n","status":"published","published":"2026-10-12T18:47:12Z","modified":"2026-10-12T19:00:45.088053549Z","updated_at":"2026-11-02T15:49:43.795591Z"}]}}