Search: CVE-2026-42617

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_ir_to_ib() function within index.c. This flaw can be triggered by extending a directory, such as creating a file, using a crafted malicious NTFS image. The vulnerability affects the SUID-root ntfs-3g binary and allows an attacker to corrupt heap memory.