In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Aug 24, 2026 · NIST NVD

   Detected

   In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.

2. Oct 14, 2026 · NIST NVD

   Updated

   In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.

Affected

• cpe tuxera/ntfs-3gversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-56135

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-56135

  30-day exploitation probability 0.1%

  first.org
• NIST NVDVulnerability recordCVE-2026-56135

  In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating

  nvd.nist.gov

References

• Mitigation · github.com