CVE-2026-56136

An out-of-bounds read in ntfs_ir_nill() within libntfs-3g/index.c affects NTFS-3G through 2026.2.25 . An attacker can trigger the vulnerability by crafting a malicious NTFS image and creating a file with a crafted name, leading to disclosure of confidential information from the ntfs-3g process me...