CVE-2021-35269

NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfsattrsetupflag, a heap buffer overflow can occur allowing for code execution and escalation of privileges...

CVE-2021-35268

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfsinoderealopen, a heap buffer overflow can occur allowing for code execution and escalation of privileges...

CVE-2021-39252

A crafted NTFS image can cause an out-of-bounds read in ntfsielookup in NTFS-3G 2021.8.22...

CVE-2021-39253

CVE-2021-39253 affects NTFS-3G prior to version 2021.8.22. A crafted NTFS image can trigger an out-of-bounds read in the function ntfs_runlists_merge_i, potentially leading to memory access errors. Several trusted sources summarize the issue across distributions and advisories, all tying the vuln...

CVE-2021-39263

A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfsgetattributevalue, in NTFS-3G 2021.8.22...

CVE-2021-39255

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72270)

Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . NTFS-3G suffers from a buffer overflow vulnerability that can be exploited by an attacker to potentially cause out-of-bounds reads in ntfsattrfind and...

CVE-2021-39255

A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfsattrfindinattrdef, in NTFS-3G 2021.8.22...

CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

CVE-2021-39255

NTFS-3G vulnerable: crafted NTFS images can trigger an out-of-bounds read due to an invalid attribute in ntfs_attr_find_in_attrdef in NTFS-3G versions prior to 2021.8.22. Affected product: ntfs-3g. Impact: information disclosure/possible crash from out-of-bounds read (local impact per CVE). Remed...

CVE-2021-39262

CVE-2021-39262 affects NTFS-3G prior to 2021.8.22, enabling a crafted NTFS image to trigger an out-of-bounds access in the ntfs_decompress function. Public advisories across multiple distributions (Debian, Alpine, AlmaLinux, etc.) indicate a fix in or after version 2021.8.22. Affected packages in...

CVE-2021-39253

A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...

CVE-2021-39259

A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfsinodelookupbyname, in NTFS-3G 2021.8.22...

CVE-2021-33285

NTFS-3G vulnerability (CVE-2021-33285) affects versions before 2021.8.22. A crafted NTFS attribute input to ntfs_get_attribute_value can trigger an out-of-bounds heap access due to a missing consistency check after reading an MFT record; if bytes_in_use is not less than bytes_allocated, parsing c...

CVE-2021-35269

NTFS-3G vulnerability CVE-2021-35269 affects ntfs-3g of versions prior to 2021.8.22. A specially crafted NTFS attribute from the MFT may trigger a heap buffer overflow in ntfs_attr_setup_flag, allowing code execution and privilege escalation. Public advisories (Alpine Linux and Debian/Marian refe...

CVE-2021-35267

NTFS-3G is affected by CVE-2021-35267 for versions older than 2021.8.22. The issue is a stack/heap buffer overflow in MFT/MFTMirror handling that can enable code execution or privilege escalation when setuid-root. Connected advisories from Astra Linux and Alpine Linux confirm the

CVE-2021-39256

CVE-2021-39256 describes a heap-based buffer overflow in ntfs_inode_lookup_by_name within NTFS-3G. The issue affects NTFS-3G prior to version 2021.8.22 when processing a crafted NTFS image, potentially enabling exploitation via local interaction. Connected advisories confirm this vulnerability in...

CVE-2021-39258

CVE-2021-39258 affects NTFS-3G prior to 2021.8.22, causing out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find when processing a crafted NTFS image. Public references list the issue in NTFS-3G and note that upgrading to version 2021.8.22 or later resolves the vulnerability. Connecte...