CVE-2026-46569
published 2026-10-07CVE-2026-46569: In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the…
PriorityP340high7.7CVSS 3.1
AVLACLPRNUINSUCNIHAH
EPSS
0.16%
4.8th percentile
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tuxera | ntfs-3g | < 2026.7.7 | 2026.7.7 |
| ubuntu | ntfs-3g | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail()
bugzilla·2026-10-07
CVE-2026-46569 [HIGH] CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail()
CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail()
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.
Bugzilla
CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail() [fedora-all]
bugzilla·2026-10-07
CVE-2026-46569 [HIGH] CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail() [fedora-all]
CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.
Bugzilla
CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail() [epel-all]
bugzilla·2026-10-07
CVE-2026-46569 [HIGH] CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail() [epel-all]
CVE-2026-46569 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_copy_tail() [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.
2026-10-07
Published