Threats affecting pkg:github/tuxera/ntfs-3g

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_index_walk_down() function. This flaw allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image and triggering the overflow via specially crafted file metadata. The vulnerability has a high severity with a CVSS score of 8.1.

An out-of-bounds read vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_fix_file_name() function. This flaw can be triggered by performing a readlink operation on a specially crafted corrupted NTFS file, potentially allowing an attacker with local privileges to read sensitive information from the process memory of ntfs-3g. The vulnerability has a medium severity rating with a CVSS score of 5.5.

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_ib_copy_tail() function within libntfs-3g/index.c. This flaw allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image and triggering the overflow through directory extension operations such as file creation. The vulnerability has a high severity rating with a CVSS score of 7.7.

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_ir_to_ib() function within index.c. This flaw can be triggered by extending a directory, such as creating a file, using a crafted malicious NTFS image. The vulnerability affects the SUID-root ntfs-3g binary and allows an attacker to corrupt heap memory.

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_ib_cut_tail() function within libntfs-3g/index.c. This flaw allows an attacker to corrupt heap memory by crafting a malicious NTFS image and creating a file in a specially crafted directory. The vulnerability affects the SUID-root ntfs-3g binary, potentially leading to high impact on confidentiality, integrity, and availability.

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_decompress() function of compress.c. This flaw allows an attacker with local privileges to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The vulnerability can be triggered by reading a specially crafted file. It has a CVSS score of 7.1, indicating high severity, with impact on integrity and availability but no confidentiality loss.

CVE-2026-56136 is an out-of-bounds read vulnerability in NTFS-3G through version 2026.2.25. It occurs in the ntfs_ir_nill() function within libntfs-3g/index.c and can be triggered by creating a file with a specially crafted name. This flaw allows an attacker with local access to read potentially confidential information from the memory of the ntfs-3g process. The vulnerability has a medium severity rating with a CVSS score of 4.7.

A heap-based buffer overflow vulnerability exists in NTFS-3G through version 2026.2.25 in the build_inherited_id() function. This flaw can be triggered by creating a file in a specially crafted directory within a malicious NTFS image, potentially allowing heap memory corruption in the SUID-root ntfs-3g binary.

CVE-2026-40706 is a high-severity heap-based buffer overflow vulnerability in the Tuxera NTFS-3G driver version 2022.10.3 and earlier before 2026.2.25. The flaw exists in the ntfs_build_permissions_posix() function within acls.c and can be triggered by processing a malicious NTFS image containing specific security descriptors with multiple ACCESS_DENIED ACEs that include WRITE_OWNER from distinct group SIDs. This vulnerability affects the SUID-root ntfs-3g binary during file read operations such as stat, readdir, and open, potentially allowing heap memory corruption. No official patch or remediation guidance is currently available from the vendor. The vulnerability has a CVSS 3.