CVE-2021-39253

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22

Description The issue is related to a crafted NTFS image that can cause an out-of-bounds read in the ntfs runlists merge i function of the NTFS-3G driver for the FUSE module. This can potentially allow an attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 2021.8.22, update to version 2021.8.22 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted NTFS images to minimize the risk of exploitation.