PT-2026-60523 · Canonical · Ntfs-3G

CVE-2026-42616 · Published 2026-07-15 · Updated 2026-07-16

OSV

It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker could possibly use this issue to execute arbitrary code. (CVE-2026-42616)

It was discovered that NTFS-3G had multiple heap buffer overflows when processing certain NTFS images. A local attacker could possibly use these issues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618, CVE-2026-46569, CVE-2026-46570, CVE-2026-46572, CVE-2026-56135)

It was discovered that NTFS-3G had out-of-bounds reads when processing certain NTFS images. A local attacker could possibly use these issues to obtain sensitive information. (CVE-2026-46571, CVE-2026-56136)

Related Identifiers

CVE-2026-42616

USN-8554-1

Affected Products

Ntfs-3G

References · 13

• https://ubuntu.com/security/CVE-2026-42617 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8554-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-42616 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42616 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56135 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8554-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46571 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56136 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-42616 · Security Note
• https://ubuntu.com/security/CVE-2026-46570 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46572 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42618 · Vendor Advisory