These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-56136 is a MEDIUM-severity vulnerability in NTFS-3G, a Linux driver for NTFS file systems. An out-of-bounds read in `ntfs_ir_nill()` in `libntfs-3g/index.c` allows attackers to read confidential information in an ntfs-3g process by crafting a malicious NTFS image. This is triggered by creating a file with a crafted name. The vulnerability has a CVSS score of 4.7.
A heap-based buffer overflow exists in NTFS-3G through 2026.2.25 in the function build_inherited_id() in libntfs-3g/security.c. This vulnerability allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory. Defenders responsible for systems where NTFS-3G is used should assess exposure and [truncated]