CVE-2021-39262

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22

Description The issue is related to an out-of-bounds access in the ntfs decompress function of the NTFS-3G driver, which can be triggered by a crafted NTFS image. This can potentially allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 2021.8.22, update to version 2021.8.22 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ntfs decompress function until a patch is available.