CVE-2022-40284 - CVE House
Back to Database
Status published Unknown CVE-2022-40284

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted...

Vulnerability Description

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40284

Credits & Attribution

No credits recorded in the NVD database.

References

More from tuxera

View All →
CVE-2022-30789
A crafted NTFS image can cause a heap-based buffer overflow...
Unknown 0
CVE-2022-30788
A crafted NTFS image can cause a heap-based buffer overflow...
Unknown 0
CVE-2022-30787
An integer underflow in fuse_lib_readdir enables arbitrary memory read operations...
Medium 6.7
CVE-2022-30786
A crafted NTFS image can cause a heap-based buffer overflow...
Unknown 0
CVE-2022-30785
A file handle created in fuse_lib_opendir, and later used in...
Medium 6.7

Affected Vendor

Affected Software

ntfs-3g, debian linux, fedora
Vulnerable Versions:
0, 10.0, 35, 36, 37

Timeline

Official Publish: November 6th, 2022
Last Modified: May 2nd, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.