CVE-2022-30788

ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc

Published May 26, 2022 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3055-1 ntfs-3g security update
Debian DSA Debian DSA DSA-5160-1 ntfs-3g security update
EUVD EUVD EUVD-2022-52611 A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
Ubuntu USN Ubuntu USN USN-5463-1 NTFS-3G vulnerabilities
Ubuntu USN Ubuntu USN USN-5463-2 NTFS-3G vulnerabilities
History
Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Dec 2, 2025, 9:00 PM
Reserved
May 16, 2022, 12:00 AM
Status
Modified
Published
May 26, 2022, 4:15 PM
Modified
Jun 17, 2026, 4:44 AM
Severity
Moderate
Public date
May 26, 2022, 12:00 AM