PT-2026-60530 · Ntfs-3G · Ntfs-3G

CVE-2026-46571 · Published 2026-07-15 · Updated 2026-07-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25

Description An out-of-bounds read exists in the ntfs fix file name() function within libntfs-3g/reparse.c. This issue allows an attacker to read potentially confidential information from the ntfs-3g process memory by using a specially crafted malicious NTFS image. The flaw is triggered when a readlink operation is performed on a corrupted file.

Recommendations Update to version 2026.2.25 or later.

Related Identifiers

CVE-2026-46571

OPENSUSE-SU-2026:11320-1

USN-8554-1

Affected Products

Ntfs-3G

References · 23

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46571 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8554-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11320-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46571 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8554-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46572 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42618 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42617 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46570 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42616 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46571 · Security Note
• https://suse.com/security/cve/CVE-2026-46569 · Note