> CVE-2026-42616

« BACK_TO_HOME
PUBLISHED
2026-10-07 14:17
MODIFIED
2026-10-07 14:47
EPSS (Prob. Exploit)
0.16%
Top 95.2%
DATA SOURCES:
NVD 🔗 2026-10-07 FIRST EPSS 🔗 2026-10-20 OSV 🔗 2026-10-11 MSRC 🔗 2026-10-12

> DESCRIPTION

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
67 versions affected
ALIASES:
GHSA-p6mp-gp2j-7358

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/10/2026 14:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 1 week ago

> REFERENCES

https://github.com/tuxera/ntfs-3g/releases#release-2026.7.7
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-p6mp-gp2j-7358
« BACK_TO_HOME