CVE-2026-46570 Memory corruption in n/a

High 8.1 Published 7 Oct 2026 Updated 7 Oct 2026

A heap buffer overflow in NTFS-3G allows attackers to execute arbitrary code with root privileges via a malicious NTFS image.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-46570?

CVE-2026-46570 is a high-severity memory corruption vulnerability in n/a, published on 7 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata.

Weakness: CWE-122

Which versions are affected by CVE-2026-46570?

It affects 1 product.

Products include Tuxera Ntfs-3g.

How do I fix CVE-2026-46570?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-46570 being exploited?

There is no known exploitation of CVE-2026-46570 in the wild and no public exploit code.

Sources

Also known as AZL-106875, DEBIAN-CVE-2026-46570, GHSA-m6qq-pv5j-2wxc, UBUNTU-CVE-2026-46570.