CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791395301)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791395301 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes fo...

Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

Debian: CVE-2026-42618: ntfs-3g -- security update

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

CVE-2026-46570

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata...

CVE-2026-42618

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

Debian: CVE-2026-42616: ntfs-3g -- security update

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42617

A heap buffer overflow exists in the ntfs-3g driver (before version 2026.7.7 ) within the ntfs_ir_to_ib() function in index.c. A local attacker can exploit this flaw by crafting a malicious NTFS image to trigger the overflow during directory expansion, such as when creating a file. The vulnerabil...

CVE-2026-46570

A heap buffer overflow exists in NTFS-3G before version 2026.7.7 within the ntfs_index_walk_down() function in libntfs-3g/index.c. An attacker can exploit this by crafting a malicious NTFS image with manipulated file metadata. When the SUID-root ntfs-3g binary processes this image, the overflow a...

CVE-2026-46572

A heap-based buffer overflow exists in the ntfs_ib_cut_tail() function within libntfs-3g/index.c of NTFS-3G versions prior to 2026.7.7 . A local attacker can trigger this overflow by crafting a malicious NTFS filesystem image and creating a file within a specially crafted directory. This memory c...

CVE-2026-42616

A heap buffer overflow exists in the ntfs-3g utility (specifically within the cat() function in ntfscat.c) for versions prior to 2026.7.7 . An attacker can trigger this vulnerability by providing a maliciously crafted NTFS filesystem image . When the ntfscat binary attempts to read a file from th...

CVE-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42618

A single-byte heap buffer overflow exists in the ntfs-3g component (before version 2026.7.7 ) within the ntfs_decompress() function in compress.c. An attacker can exploit this by crafting a malicious NTFS image and triggering the overflow by reading the specially crafted file. The vulnerability a...

EUVD-2026-94357

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

PT-2026-107546

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description A heap buffer overflow occurs in the EXR decoder when processing a specially crafted EXR image, which leads to a process crash. A heap buffer overflow is a condition where a program writes mor...

PT-2026-107554

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31 Description A crafted local call to the 'GetVirtualPixels' API can trigger an integer calculation error, leading to a heap buffer overflow. This occurs when the...

CVE-2026-46570

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

EUVD-2026-94355

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...