CVE-2026-56135
published 2026-08-24CVE-2026-56135: In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to…
PriorityP341high7.4CVSS 3.1
AVLACHPRNUINSUCHIHAH
EPSS
0.14%
3.2th percentile
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tuxera | ntfs-3g | < 2026.7.7 | 2026.7.7 |
| ubuntu | ntfs-3g | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
NTFS-3G vulnerabilities
vendor_ubuntu·2026-07-16
CVE-2026-42616 NTFS-3G vulnerabilities
Title: NTFS-3G vulnerabilities
Summary: Several security issues were fixed in NTFS-3G.
It was discovered that NTFS-3G had a heap buffer overflow when reading
certain NTFS images. A local attacker could possibly use this issue to
execute arbitrary code. (CVE-2026-42616)
It was discovered that NTFS-3G had multiple heap buffer overflows when
processing certain NTFS images. A local attacker could possibly use these
issues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618,
CVE-2026-46569, CVE-2026-46570, CVE-2026-46572, CVE-2026-56135)
It was discovered that NTFS-3G had out-of-bounds reads when processing
certain NTFS images. A local attacker could possibly use these issues to
obtain sensitive information. (CVE-2026-46571, CVE-2026-56136)
Instructions: In general, a standard syste
VulDB
Tuxera ntfs-3g up to 2026.2.25 libntfs-3g/security.c build_inherited_id buffer overflow
vuldb·2026-08-24
CVE-2026-56135 [CRITICAL] Tuxera ntfs-3g up to 2026.2.25 libntfs-3g/security.c build_inherited_id buffer overflow
A vulnerability was found in Tuxera ntfs-3g up to 2026.2.25. It has been rated as critical. This impacts the function build_inherited_id of the file libntfs-3g/security.c. Performing a manipulation results in buffer overflow.
This vulnerability is identified as CVE-2026-56135. The attack is only possible with local access. There is not any exploit available.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all]
bugzilla·2026-08-24
CVE-2026-56135 [HIGH] CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all]
CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.
Bugzilla
CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image
bugzilla·2026-08-24
CVE-2026-56135 [HIGH] CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image
CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.
Bugzilla
CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [fedora-all]
bugzilla·2026-08-24
CVE-2026-56135 [HIGH] CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [fedora-all]
CVE-2026-56135 ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.
2026-08-24
Published