mtools vulnerabilities (Debian)

2 vulnerabilities.

• mtools Debian GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c. CVE-2026-118384 6.1 MediumOctober 28, 2026
• mtools Debian MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and... CVE-2004-2303 Public exploitFix available 3.6 LowDecember 31, 2004