CyberRota Analysis
AI-GeneratedThe vulnerability in NTFS-3G allows an attacker to exploit an out-of-bounds read in the ntfs_ir_nill() function, potentially exposing confidential information during the processing of a maliciously crafted NTFS image. This issue arises when a file with a specially designed name is created, leading to unauthorized data access. Organizations using NTFS-3G, especially those handling sensitive data, should prioritize addressing this vulnerability to mitigate the risk of information leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.