CVE-2026-56136
MediumSummary
In NTFS-3G through version 2026.2.25, an out-of-bounds read vulnerability exists in the ntfs_ir_nill() function in libntfs-3g/index.c. An attacker can exploit this by crafting a malicious NTFS image containing a file with a specially crafted name, leading to the disclosure of potentially confidential information from the ntfs-3g process memory.
Risk Assessment
The risk involves potential leakage of sensitive data from the ntfs-3g process memory, which could expose confidential information such as passwords, keys, or user data, especially in environments processing untrusted NTFS images.
Recommendation
Immediately update NTFS-3G to a version newer than 2026.2.25 once a patch is released. Until then, avoid mounting untrusted NTFS images on production systems.
Original NVD description (English source)
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.