CVE-2026-46572
published 2026-10-07CVE-2026-46572: In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the…
PriorityP341high7.4CVSS 3.1
AVLACHPRNUINSUCHIHAH
EPSS
0.15%
3.8th percentile
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tuxera | ntfs-3g | < 2026.7.7 | 2026.7.7 |
| ubuntu | ntfs-3g | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail() [epel-all]
bugzilla·2026-10-07·CVSS 7.4
CVE-2026-46572 [HIGH] CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail() [epel-all]
CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail() [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.
Bugzilla
CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail()
bugzilla·2026-10-07·CVSS 7.4
CVE-2026-46572 [HIGH] CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail()
CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail()
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.
Bugzilla
CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail() [fedora-all]
bugzilla·2026-10-07·CVSS 7.4
CVE-2026-46572 [HIGH] CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail() [fedora-all]
CVE-2026-46572 ntfs-3g: ntfs-3g: Privilege escalation via heap-based buffer overflow in ntfs_ib_cut_tail() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.
2026-10-07
Published