Related Vulnerabilities: CVE-2022-30787  

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

Description

The MITRE CVE dictionary describes this issue as:

An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

Additional Information

  • Bugzilla 2093333: CVE-2022-30787 ntfs-3g: integer underflow in fuse_lib_readdir enables arbitrary memory read operations
  • CWE-190->CWE-125: Integer Overflow or Wraparound leads to Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2022-30787