CVE-2018-11727

2018-06-1921:00:00

mitre

github.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

JSON

The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub