CVE-2021-39254

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22

Description A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs attr record resize. This issue may allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 2021.8.22, update to version 2021.8.22 or later to resolve the issue. As a temporary workaround, consider restricting the use of NTFS images from untrusted sources to minimize the risk of exploitation.