PT-2026-60525
CVE-2026-42618
·
Published
2026-07-15
·
Updated
2026-10-07
Description by
CVSS 4.0
7.5
HighMetricsAV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
NTFS-3G versions prior to 2026.2.25
Description
A heap buffer overflow occurs in the
ntfs decompress() function within the compress.c file. An attacker can corrupt one byte of heap memory in the SUID-root ntfs-3g binary by reading a specially crafted NTFS image.Recommendations
Update to version 2026.2.25 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾