CVE-2021-39251

A crafted NTFS image can cause a NULL pointer dereference in ntfsextentinodeopen in NTFS-3G 2021.8.22...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72268)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72267)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...

CVE-2021-35267

NTFS-3G is affected by CVE-2021-35267 for versions older than 2021.8.22. The issue is a stack/heap buffer overflow in MFT/MFTMirror handling that can enable code execution or privilege escalation when setuid-root. Connected advisories from Astra Linux and Alpine Linux confirm the

CVE-2021-39253

CVE-2021-39253 affects NTFS-3G prior to version 2021.8.22. A crafted NTFS image can trigger an out-of-bounds read in the function ntfs_runlists_merge_i, potentially leading to memory access errors. Several trusted sources summarize the issue across distributions and advisories, all tying the vuln...

CVE-2021-39263

A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfsgetattributevalue, in NTFS-3G 2021.8.22...

CVE-2021-39253

A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...

CVE-2021-39256

A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...

CVE-2021-39255

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...

CVE-2021-39253

A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...

CVE-2021-39259

A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfsinodelookupbyname, in NTFS-3G 2021.8.22...

CVE-2021-39255

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...

CVE-2021-33285

NTFS-3G vulnerability (CVE-2021-33285) affects versions before 2021.8.22. A crafted NTFS attribute input to ntfs_get_attribute_value can trigger an out-of-bounds heap access due to a missing consistency check after reading an MFT record; if bytes_in_use is not less than bytes_allocated, parsing c...

CVE-2021-35269

NTFS-3G vulnerability CVE-2021-35269 affects ntfs-3g of versions prior to 2021.8.22. A specially crafted NTFS attribute from the MFT may trigger a heap buffer overflow in ntfs_attr_setup_flag, allowing code execution and privilege escalation. Public advisories (Alpine Linux and Debian/Marian refe...

CVE-2021-39258

CVE-2021-39258 affects NTFS-3G prior to 2021.8.22, causing out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find when processing a crafted NTFS image. Public references list the issue in NTFS-3G and note that upgrading to version 2021.8.22 or later resolves the vulnerability. Connecte...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72269)

Tuxera NTFS-3G is a set of open source, cross-platform drivers from Tuxera Finland that support reading and writing to NTFS partitions. NTFS-3G is vulnerable to a buffer overflow vulnerability that could be exploited to cause a heap buffer overflow and allow code execution...

CVE-2021-39257

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

CVE-2021-39262

A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...

CVE-2021-35268

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfsinoderealopen, a heap buffer overflow can occur allowing for code execution and escalation of privileges...