This vulnerability exists in NTFS-3G versions prior to 2026.2.25. The flaw is an out-of-bounds read in the ntfs_ir_nill() function, triggered by creating a file with a maliciously crafted name in an NTFS image. Exploiting this issue allows an attacker to read memory beyond intended bounds within the NTFS-3G process, potentially exposing sensitive information. No CVSS score or detailed vendor advisory is available, and no known exploits have been reported in the wild. The vulnerability affects local processing of crafted NTFS images.

Successful exploitation can lead to disclosure of potentially confidential information from the memory of the NTFS-3G process. There is no indication of code execution or system compromise. The impact is limited to information disclosure within the context of the NTFS-3G process handling a malicious NTFS image.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted or malicious NTFS images with vulnerable versions of NTFS-3G. Monitor vendor communications for updates and apply patches promptly once released.