CVE-2026-40706Disclosure

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path (stat, readdir, open) when processing a security descriptor with multiple ACCESS_DENIED ACEs containing WRITE_OWNER from distinct group SIDs.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-04-27); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-27	2	Disclosure2
2026-04-28	1	Disclosure1

Full discourse3 posts

Open Source Security mailing list@oss_security163d
Disclosure
CVE-2026-40706: ntfs-3g 2022.10.3: Heap buffer overflow https://www.openwall.com/lists/oss-security/2026/04/21/4 allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path (stat, readdir, open).
Post summary
A new heap buffer overflow vulnerability (CVE‑2026‑40706) in ntfs‑3g 2022.10.3 has been disclosed, allowing attackers to corrupt heap memory with malicious NTFS images.
01051346
4.7K followersView on X
CVE@CVEnew163d
Disclosure
CVE-2026-40706 In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the… https://www.cve.org/CVERecord?id=CVE-2026-40706
Post summary
CVE-2026-40706 is a heap buffer overflow in NTFS‑3G, with technical details given but no proof of concept, exploit, or patch information.
00010259
57.3K followersView on X
Infoflowcloud@infoflowcloud163d
Disclosure
🚨*CVE* CVE-2026-40706 In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the… https://www.cve.org/CVERecord?id=CVE-2026-40706 ----- Traducción: CVE-2026-40706 En … http://infoflow.cloud`
Post summary
The text announces a new heap buffer overflow vulnerability in NTFS-3G before version 2026.2.25, detailing the affected function and possible impact, without providing PoC, exploit, or patch information.
0000046
72 followersView on X

Explore more

Back to dashboard