CyberSecBulletin

Tuxera vulnerabilities

We track 9 vulnerabilities in Tuxera products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.

9vulnerabilities
0critical
9high
0exploited
7.6average CVSS score

Latest Tuxera vulnerabilities

  • 8.1 High severity

    Ntfs-3g: Heap-based Buffer Overflow

    CVE-2026-46570Tuxera

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading th

  • 7.4 High severity

    Ntfs-3g: Heap-based Buffer Overflow

    CVE-2026-46572Tuxera

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a fil

  • 7.7 High severity

    Ntfs-3g: Out-of-bounds Write

    CVE-2026-46569Tuxera

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a

  • 7.1 High severity

    Ntfs-3g: Heap-based Buffer Overflow

    CVE-2026-42618Tuxera

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the

  • 7.1 High severity

    Ntfs-3g: Heap-based Buffer Overflow

    CVE-2026-42617Tuxera

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g.,

  • 7.8 High severity

    Ntfs-3g: Out-of-bounds Write

    CVE-2026-42616Tuxera

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.

  • 7.4 High severity

    Ntfs-3g: Heap-based Buffer Overflow

    CVE-2026-56135Tuxera

    In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is t

  • 8.4 High severity

    NTFS-3G: Heap-based Buffer Overflow

    CVE-2026-40706Tuxera

    In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the

  • 7.8 High severity

    Ntfs-3g: Buffer Copy without Checking Size of Input

    CVE-2022-40284Tuxera

    A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G softwa