AZL-97932 CVE-2026-56135 affecting package ntfs-3g 2022.10.3-3

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

openSUSE 16: libntfs-3g-devel / libntfs-3g89 / ntfs-3g / ntfsprogs / etc (openSUSE-SU-2026:21484-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21484-1 advisory. - CVE-2026-42616: heap buffer overflow in cat of cat.c can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image...

OPENSUSE-SU-2026:11320-1 libntfs-3g-devel-2022.10.3-8.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-46569

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsibcopytail, in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

PT-2026-60528

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25 Description A heap buffer overflow occurs in the ntfs ib copy tail function within libntfs-3g/index.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by using a specially crafted NTFS...

OPENSUSE-SU-2026:10614-1 libntfs-3g-devel-2022.10.3-6.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-6.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED12 / SLES12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2024:2074-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2074-1 advisory. - CVE-2023-52890: Fixed use-after-free in 'ntfsuppercasembs' in unistr.c bsc1226007. Tenable has extracted the precedin...

OPENSUSE-SU-2024:11101-1 libntfs-3g-devel-2021.8.22-1.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2021.8.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14046-1 libntfs-3g-devel-2022.10.3-4.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12473-1 libntfs-3g-devel-2022.10.3-1.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12115-1 libntfs-3g-devel-2022.5.17-1.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.5.17-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-52890

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

AZL-42667 CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

CVE-2023-52890

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

CVE-2023-52890

NTFS-3G before 75dcdc2 contains a use-after-free in ntfs_uppercase_mbs (libntfs-3g/unistr.c). Exploitation is noted as challenging in the sources. A fixed version exists (75dcdc2); several advisories reference updates to remediate CVE-2023-52890. Connected documents associate the CVE with ntfs-3g...

PT-2023-9789

Name of the Vulnerable Software and Affected Versions NTFS-3G versions before 75dcdc2 Description The issue is related to a use-after-free error in the ntfs uppercase mbs function in libntfs-3g/unistr.c. This could potentially allow an attacker to cause a crash. However, discussions suggest that...