CVE-2026-46570
MediumSummary
In NTFS-3G through version 2026.2.25, a heap buffer overflow in ntfs_index_walk_down() in libntfs-3g/index.c allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image.
Risk Assessment
An attacker can exploit this vulnerability to escalate privileges or execute arbitrary code as root, leading to full system compromise.
Recommendation
Immediately update NTFS-3G to a version newer than 2026.2.25 once a patch is released. Until then, avoid mounting untrusted NTFS images.
Original NVD description (English source)
In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading crafted file metadata.