openwrt ▾
›
master ▾
›
vulnerability
›
CVE-2026-42616
Component Overview
Vulnerability Overview
Name
CVE-2026-42616
Source
NVD (
link
)
Debian (
link
)
Description
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.
CWEs
CWE-787
Published Date
Oct 7, 2026
Updated Date
Oct 8, 2026
Workaround
-
Advisories
https://github.com/tuxera/ntfs-3g/releases#release-2026.7.7
Release Notes
https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-p6mp-gp2j-7358
Patch
Analysis
#
Affected Component
Analysis
ntfs-3g
Exploitable
Vulnerability Rating
#
7.8
CVSSv31
Others affected components
#
Name
Project
Project Version
Version
Status
ntfs-3g
buildroot
2025.02.x
2026.7.7
Not Affected
ntfs-3g
buildroot
master
2026.7.7
Not Affected
ntfs-3g
openwrt
openwrt-25.12
2022.10.3-r1
Exploitable
ntfs-3g-ntfsprogs
yocto
kirkstone
2022.10.3
Exploitable
ntfs-3g-ntfsprogs
yocto
master
2026.9.28
Not Affected
ntfs-3g-ntfsprogs
yocto
scarthgap
2022.10.3
Exploitable