一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月8日

CVE-2026-46570 – In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in lib

未分类
📑 文章目录

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata.