CVE-2026-118384

A flaw was found in mtools. This out-of-bounds write vulnerability allows an attacker to cause a Denial of Service DoS or corrupt memory. By tricking a user into processing a specially crafted disk image containing malformed VFAT directory entries, the application writes beyond allocated buffer...