Summary
It was discovered that NTFS-3G had a heap buffer overflow when reading
certain NTFS images. A local attacker could possibly use this issue to
execute arbitrary code. (CVE-2026-42616)
It was discovered that NTFS-3G had multiple heap buffer overflows when
processing certain NTFS images. A local attacker could possibly use these
issues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618,
CVE-2026-46569, CVE-2026-46570, CVE-2026-46572, CVE-2026-56135)
It was discovered that NTFS-3G had out-of-bounds reads when processing
certain NTFS images. A local attacker could possibly use these issues to
obtain sensitive information. (CVE-2026-46571, CVE-2026-56136)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | ntfs-3g | 1:2021.8.22-3ubuntu1.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | ntfs-3g | 1:2022.10.3-1.2ubuntu3.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | ntfs-3g | 1:2022.10.3-5ubuntu1.1 |
Vulnerabilities 9
-
High 8.1
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows a…
-
High 7.8
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap…
-
High 7.7
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an…
-
High 7.4
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an at…
-
High 7.4
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/se…
-
High 7.1
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corr…
-
High 7.1
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to…
-
Medium 5.5
In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an …
-
Medium 4.7
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attac…
References
-
report
https://ubuntu.com/security/CVE-2026-42616
-
report
https://ubuntu.com/security/CVE-2026-42617
-
report
https://ubuntu.com/security/CVE-2026-42618
-
report
https://ubuntu.com/security/CVE-2026-46569
-
report
https://ubuntu.com/security/CVE-2026-46570
-
report
https://ubuntu.com/security/CVE-2026-46571
-
report
https://ubuntu.com/security/CVE-2026-46572
-
report
https://ubuntu.com/security/CVE-2026-56135
-
report
https://ubuntu.com/security/CVE-2026-56136