VDB
GCVE-110-MAGEIA-2026-118
GCVE-110-MAGEIA-2026-118
Advisory Published
In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in
ntfs_build_permissions_posix() in acls.c that allows an attacker to
corrupt heap memory in the SUID-root ntfs-3g binary by crafting a
malicious NTFS image. The overflow is triggered on the READ path (stat,
readdir, open) when processing a security descriptor with multiple
ACCESS_DENIED ACEs containing WRITE_OWNER from distinct group SIDs.
(CVE-2026-40706)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | ntfs-3g | 2022.10.3-1.2.mga9 (unaffected), 0 (affected) | — |
Browse GCVE Records
74,108 records in the GCVE database · Updated July 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.