CVE-2026-118384medium6.1
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
Impact
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
Source excerpt · mitreAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
GNU · mtools
Other versions: unknown
| Version / range | Source status |
|---|---|
| 0 through 4.0.49 (inclusive) | affected |
Original source description
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
References
- Source reference ftp.gnu.org/gnu/mtools/mtools-4.0.49.tar.gz
- Source reference lists.gnu.org/archive/html/info-gnu/2025-06/msg00004.html
- Source reference github.com/deepin-community/mtools/blob/16d295331a1cfbcf02ad0b2f03c9b906197cf3ee/vfat.c
- Source reference github.com/deepin-community/mtools/blob/16d295331a1cfbcf02ad0b2f03c9b906197cf3ee/vfat.c