CVE-2026-56136

An out-of-bounds read in ntfs_ir_nill() within libntfs-3g/index.c affects NTFS-3G through 2026.2.25 . An attacker can trigger the vulnerability by crafting a malicious NTFS image and creating a file with a crafted name, leading to disclosure of confidential information from the ntfs-3g process me...

CVE-2026-56135

A heap-based buffer overflow in the build_inherited_id() function of libntfs-3g/security.c affects NTFS-3G through 2026.2.25 . The overflow is triggered when an attacker mounts a maliciously crafted NTFS image and creates a file within a crafted directory. Because the ntfs-3g binary runs with SUI...