CVE-2026-46571: Medium severity tuxera NTFS-3G vulnerability
In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ntfs-3gto a version that resolves this vulnerability.Fixed in 1:2022.10.3-5+deb13u2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2022.10.3-5 - Upgrade
Upgrade
NTFS-3Gto a version that resolves this vulnerability.Fixed in 2026.7.7
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46571?
The severity of CVE-2026-46571 is rated as risk 26.
What software is affected by CVE-2026-46571?
CVE-2026-46571 affects the ntfs-3g package on Debian systems.
How do I fix CVE-2026-46571?
To fix CVE-2026-46571, update the ntfs-3g package to the latest version available for your Debian system.
When was CVE-2026-46571 last updated?
CVE-2026-46571 was last updated on 16 July 2026.
What impact does CVE-2026-46571 have on systems?
CVE-2026-46571 can lead to potential compromise of data integrity and user privacy on affected systems.