CVE-2026-46569
Awaiting Analysis Awaiting Analysis - Queue

Heap Buffer Overflow in NTFS-3G

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: MITRE

Description
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-46569
EUVD
EUVD-2026-94354

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-46569 is a heap buffer overflow in NTFS-3G before version 2026.7.7. It occurs in the ntfs_ib_copy_tail() function in libntfs-3g/index.c. An attacker can exploit this by creating a malicious NTFS image and extending a directory, such as by creating a file, to corrupt heap memory in the SUID-root ntfs-3g binary.

Detection Guidance

Detecting this vulnerability requires checking the installed version of NTFS-3G. Run 'ntfs-3g --version' to see if your version is below 2026.7.7. If it is, the system is vulnerable.

Impact Analysis

This vulnerability allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary. This could lead to arbitrary code execution, system crashes, or privilege escalation, potentially compromising the confidentiality, integrity, and availability of the affected system.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized memory corruption in the SUID-root ntfs-3g binary. Exploitation may lead to data integrity issues or unauthorized access, which are critical concerns under these regulations.

Mitigation Strategies

Immediately update NTFS-3G to version 2026.7.7 or later. Since the binary is SUID-root, patching is critical to prevent potential privilege escalation or memory corruption.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46569. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart