Search: CVE-2026-42618

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_decompress() function of compress.c. This flaw allows an attacker with local privileges to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The vulnerability can be triggered by reading a specially crafted file. It has a CVSS score of 7.1, indicating high severity, with impact on integrity and availability but no confidentiality loss.