CVE-2026-46572: Buffer Overflow
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ntfs-3gto a version that resolves this vulnerability.Fixed in 1:2022.10.3-5+deb13u2 - Upgrade
Upgrade
ntfs-3gto a version that resolves this vulnerability.Fixed in 2026.7.7
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46572?
CVE-2026-46572 has a severity rating of 5, indicating a medium risk.
How do I fix CVE-2026-46572?
To fix CVE-2026-46572, update the ntfs-3g package to the latest version provided by Debian.
What software is affected by CVE-2026-46572?
CVE-2026-46572 affects the ntfs-3g software on Debian systems.
When was CVE-2026-46572 last updated?
CVE-2026-46572 was last updated on July 16, 2026.
What are the potential impacts of CVE-2026-46572?
CVE-2026-46572 could lead to data corruption or unauthorized access in NTFS file systems.