CVE-2026-46569
MediumSummary
In NTFS-3G through version 2026.2.25, a heap buffer overflow exists in the ntfs_ib_copy_tail() function in libntfs-3g/index.c. This vulnerability allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image.
Risk Assessment
An attacker can exploit this vulnerability to escalate privileges or execute arbitrary code in the root context, leading to full system compromise. The risk is especially high in environments where users can mount external NTFS images.
Recommendation
Immediately update NTFS-3G to a version later than 2026.2.25. Until the update is applied, disable mounting of NTFS images by untrusted users or remove the SUID bit from the ntfs-3g binary.
Original NVD description (English source)
In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.