A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_attr_pwrite) causing stack consumption in NTFS-3G < 2021.8.22.

...

NTFS-3G versions < 2021.8.22 a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root.

...

In NTFS-3G versions < 2021.8.22 when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.

...

In NTFS-3G versions < 2021.8.22 when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.

...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22.

...

A crafted NTFS image can cause an integer overflow in memmove leading to a heap-based buffer overflow in the function ntfs_attr_record_resize in NTFS-3G < 2021.8.22.

...

CVE-2021-43240

NTFS Set Short Name Elevation of Privilege Vulnerability...

CVE-2021-43229

Windows NTFS Elevation of Privilege Vulnerability...

CVE-2021-43231

Windows NTFS Elevation of Privilege Vulnerability...

CVE-2021-43229

Windows NTFS Elevation of Privilege Vulnerability...

CVE-2021-43231

Windows NTFS Elevation of Privilege Vulnerability...

CVE-2021-43230

Windows NTFS Elevation of Privilege Vulnerability...

CVE-2021-43230

Windows NTFS Elevation of Privilege Vulnerability...

Privilege escalation

Windows NTFS Elevation of Privilege Vulnerability...

Privilege escalation

NTFS Set Short Name Elevation of Privilege Vulnerability...

Privilege escalation

Windows NTFS Elevation of Privilege Vulnerability...

Privilege escalation

Windows NTFS Elevation of Privilege Vulnerability...

CVE-2021-43240 NTFS Set Short Name Elevation of Privilege Vulnerability

...

CVE-2021-43240 NTFS Set Short Name Elevation of Privilege Vulnerability

...

CVE-2021-43240

Technical details about CVE-2021-43240 are not publicly provided in the supplied documents. No affected products, root cause, fixes, or exploitation details are specified here. Monitor official disclosures and updates.