PT-2026-60535 · Ntfs-3G · Ntfs-3G

CVE-2026-56136 · Published 2026-07-15 · Updated 2026-07-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25

Description An out-of-bounds read occurs in the ntfs ir nill() function within libntfs-3g/index.c. This issue allows an attacker to read potentially confidential information from an ntfs-3g process by creating a file with a specially crafted name within a malicious NTFS image.

Recommendations Update to version 2026.2.25 or later.

Related Identifiers

CVE-2026-56136

OPENSUSE-SU-2026:11320-1

USN-8554-1

Affected Products

Ntfs-3G

References · 23

• https://osv.dev/vulnerability/USN-8554-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11320-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46571 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8554-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46572 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42618 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42617 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46569 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-56136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46570 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-56135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42616 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-56136 · Security Note
• https://suse.com/security/cve/CVE-2026-46569 · Note