CVE-2026-46572: n/a

CVE-2026-46572 describes a heap buffer overflow vulnerability in NTFS-3G prior to version 2026.7.7. The vulnerability is located in the ntfs_ib_cut_tail() function in libntfs-3g/index.c. An attacker can exploit this by crafting a malicious NTFS image and creating a file in a specially crafted directory, which triggers the overflow and leads to heap memory corruption in the SUID-root ntfs-3g binary.

Successful exploitation of this vulnerability could allow an attacker to corrupt heap memory in the SUID-root ntfs-3g binary. This may lead to privilege escalation or arbitrary code execution with root privileges, depending on the context and further exploitation steps. No known exploits in the wild have been reported at this time.

A fix is available in NTFS-3G version 2026.7.7. Users and administrators should upgrade to version 2026.7.7 or later to remediate this vulnerability. No additional vendor advisory content is provided, so check the vendor's official channels for confirmation and further guidance.