Most recent entries from all

fkie_cve-2026-46569

2026-10-07T23:54:24.913595+00:00

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.

OESA-2026-3108 — ntfs-3g security update

2026-10-07T23:54:24.913702+00:00

Affected: openEuler:24.03-LTS-SP1: ntfs-3g, openEuler:24.03-LTS-SP3: ntfs-3g, openEuler:24.03-LTS-SP4: ntfs-3g, openEuler:20.03-LTS-SP4: ntfs-3g, openEuler:22.03-LTS-SP4: ntfs-3g

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. Security Fix(es):

(CVE-2026-42616)

(CVE-2026-42617)

(CVE-2026-42618)

(CVE-2026-46569)

(CVE-2026-46570)

(CVE-2026-46571)

(CVE-2026-46572)

(CVE-2026-56135)

(CVE-2026-56136)

openSUSE-SU-2026:11320-1 — libntfs-3g-devel-2022.10.3-8.1 on GA media

2026-10-07T23:54:24.913782+00:00

libntfs-3g-devel-2022.10.3-8.1 on GA media

SUSE-SU-2026:3213-1 — Security update for ntfs-3g_ntfsprogs

2026-10-07T23:54:24.913824+00:00

Security update for ntfs-3g_ntfsprogs

UBUNTU-CVE-2026-46569

2026-10-07T23:54:24.913859+00:00

Affected: Ubuntu:Pro:14.04:LTS: ntfs-3g, Ubuntu:Pro:16.04:LTS: ntfs-3g, Ubuntu:18.04:LTS: ntfs-3g, Ubuntu:20.04:LTS: ntfs-3g, Ubuntu:22.04:LTS: ntfs-3g, Ubuntu:24.04:LTS: ntfs-3g, Ubuntu:26.04:LTS: ntfs-3g

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.