Most recent entries from all

fkie_cve-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.

OESA-2026-3108 — ntfs-3g security update

Affected: openEuler:24.03-LTS-SP1: ntfs-3g, openEuler:24.03-LTS-SP3: ntfs-3g, openEuler:24.03-LTS-SP4: ntfs-3g, openEuler:20.03-LTS-SP4: ntfs-3g, openEuler:22.03-LTS-SP4: ntfs-3g

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. Security Fix(es):

(CVE-2026-42616)

(CVE-2026-42617)

(CVE-2026-42618)

(CVE-2026-46569)

(CVE-2026-46570)

(CVE-2026-46571)

(CVE-2026-46572)

(CVE-2026-56135)

(CVE-2026-56136)

openSUSE-SU-2026:11320-1 — libntfs-3g-devel-2022.10.3-8.1 on GA media

libntfs-3g-devel-2022.10.3-8.1 on GA media

SUSE-SU-2026:3213-1 — Security update for ntfs-3g_ntfsprogs

Security update for ntfs-3g_ntfsprogs

UBUNTU-CVE-2026-42616

Affected: Ubuntu:Pro:14.04:LTS: ntfs-3g, Ubuntu:Pro:16.04:LTS: ntfs-3g, Ubuntu:18.04:LTS: ntfs-3g, Ubuntu:20.04:LTS: ntfs-3g, Ubuntu:22.04:LTS: ntfs-3g, Ubuntu:24.04:LTS: ntfs-3g, Ubuntu:26.04:LTS: ntfs-3g

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in cat() in cat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.