PT-2026-60529 · Ntfs-3G · Ntfs-3G
CVE-2026-46570
·
Published
2026-07-15
·
Updated
2026-07-30
CVSS v4.0
7.5
High
| Vector | AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
NTFS-3G versions prior to 2026.2.25
Description
A heap buffer overflow occurs in the
ntfs index walk down() function within libntfs-3g/index.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by providing a specially crafted NTFS image. The issue is triggered when the system reads crafted file metadata.Recommendations
Update to version 2026.2.25 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ntfs-3G