PT-2026-60524 · Canonical · Ntfs-3G

CVE-2026-42617 · Publicado 2026-07-15 · Atualizado 2026-07-16

OSV

It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker could possibly use this issue to execute arbitrary code. (CVE-2026-42616)

It was discovered that NTFS-3G had multiple heap buffer overflows when processing certain NTFS images. A local attacker could possibly use these issues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618, CVE-2026-46569, CVE-2026-46570, CVE-2026-46572, CVE-2026-56135)

It was discovered that NTFS-3G had out-of-bounds reads when processing certain NTFS images. A local attacker could possibly use these issues to obtain sensitive information. (CVE-2026-46571, CVE-2026-56136)

Identificadores relacionados

CVE-2026-42617

USN-8554-1

Produtos afetados

Ntfs-3G

Referências · 13

• https://ubuntu.com/security/CVE-2026-42617 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-42617 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-8554-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-42616 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-46569 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-56135 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8554-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-42617 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-46571 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-56136 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-46570 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-46572 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-42618 · Aviso do Fabricante