CVE-2026-46572
MediumSummary
In NTFS-3G through version 2026.2.25, a heap buffer overflow exists in the ntfs_ib_cut_tail() function in libntfs-3g/index.c. This vulnerability allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.
Risk Assessment
An attacker can exploit this vulnerability to escalate privileges or execute arbitrary code in the context of the root user, leading to full system compromise. The risk is particularly high in systems where ntfs-3g is used to mount untrusted NTFS images.
Recommendation
Immediately update NTFS-3G to a version newer than 2026.2.25 once a patch is released. Until then, avoid mounting NTFS images from untrusted sources and consider removing the SUID bit from the ntfs-3g binary.
Original NVD description (English source)
In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.