Search: CVE-2026-46570

A heap buffer overflow vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_index_walk_down() function. This flaw allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image and triggering the overflow via specially crafted file metadata. The vulnerability has a high severity with a CVSS score of 8.1.