CVE-2022-30784

Name of the Vulnerable Software and Affected Versions NTFS-3G versions through 2021.8.22

Description The issue is related to a heap exhaustion vulnerability in the ntfs get attribute value function of the NTFS-3G file system. This vulnerability can be exploited by a remote attacker using a specially crafted NTFS image file, potentially allowing the execution of arbitrary code with elevated privileges.

Recommendations For versions through 2021.8.22, consider updating to a version later than 2021.8.22 to resolve the issue. As a temporary workaround, restrict the use of the ntfs get attribute value function until a patch is available. Avoid using specially crafted NTFS image files that could trigger the heap exhaustion vulnerability.