Threats tagged 'ghsa-fpf4-vw37-hxfh'

A vulnerability in the Linux kernel's ntfs3 driver allowed an out-of-bounds read due to improper bounds checking in ntfs_dir_emit() and hdr_find_e(). The issue arises from comparing character counts against byte counts without accounting for UTF-16LE encoding and header sizes, enabling crafted NTFS images to cause reads past entry boundaries. This flaw has been resolved by correcting the bounds checks and adding key_size validation.