CVE-2026-46571

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25

Description An out-of-bounds read exists in the ntfs fix file name() function within libntfs-3g/reparse.c. This issue allows an attacker to read potentially confidential information from the ntfs-3g process memory by using a specially crafted malicious NTFS image. The flaw is triggered when a readlink operation is performed on a corrupted file.

Recommendations Update to version 2026.2.25 or later.