GNU mtools <4.0.50 OOB Write in parse_vses (vfat.c)
CVE-2026-118384 Published on October 28, 2026
GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
Vulnerability Analysis
CVE-2026-118384 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.
Weakness Type
What is a Signed comparison Vulnerability?
The program checks a value to ensure that it is less than or equal to a maximum, but it does not also verify that the value is greater than or equal to the minimum.
CVE-2026-118384 has been classified to as a Signed comparison vulnerability or weakness.
Affected Versions
GNU mtools:- Before 4.0.50 is affected.