5.5

CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tuxera ≫ Ntfs-3g Version < 2026.7.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.024
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://github.com/tuxera/ntfs-3g/releases#release-2026.7.7
Release Notes
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-52gr-j4pv-9pjh
Patch
Vendor Advisory
Mitigation