A flaw in NTFS-3G introduces an out-of-bounds read in the ntfs_fix_file_name function within libntfs-3g/reparse.c. When a specially crafted NTFS image is processed, a readlink on a corrupted file triggers a read beyond the bounds of valid memory, allowing the attacker to read data that may belong to other files or to the NTFS-3G process itself. The primary result is the disclosure of potentially confidential information stored in process memory, aligning with CWE‑125.

All NTFS-3G libraries and utilities older than the 2026.7.7 release are affected, regardless of operating system or distribution. Any build that has not been updated to 2026.7.7 or newer exposes the out-of-bounds read, making it relevant to all systems that mount or otherwise process NTFS volumes using NTFS-3G.

With a CVSS score of 5.5, the vulnerability is classified as moderate severity. The EPSS score is not available, so the likelihood of exploitation remains uncertain. It is inferred that the vulnerability would only be exploitable when a malicious NTFS image is processed by NTFS-3G, typically through mounting or executing a readlink on a corrupted file. Because the read occurs in the privileged NTFS-3G process, the disclosure could reach data that the process can access. The vulnerability is not listed in the CISA KEV catalog and no public exploits have been documented, but it remains a potential confidentiality risk if untrusted NTFS volumes are inserted into a system running NTFS-3G.