https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-11731.htmlhttps://patchthecve.com/cve/CVE-2018-11731.htmlWed, 17 Jun 2026 01:36:28 +0000MEDIUM 5.5: The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on Ghttps://patchthecve.com/cve/CVE-2018-11730.htmlhttps://patchthecve.com/cve/CVE-2018-11730.htmlWed, 17 Jun 2026 01:36:28 +0000MEDIUM 5.5: The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on https://patchthecve.com/cve/CVE-2018-11729.htmlhttps://patchthecve.com/cve/CVE-2018-11729.htmlWed, 17 Jun 2026 01:36:28 +0000MEDIUM 5.5: The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHuhttps://patchthecve.com/cve/CVE-2018-11728.htmlhttps://patchthecve.com/cve/CVE-2018-11728.htmlWed, 17 Jun 2026 01:36:28 +0000MEDIUM 5.5: The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsnhttps://patchthecve.com/cve/CVE-2018-11727.htmlhttps://patchthecve.com/cve/CVE-2018-11727.htmlWed, 17 Jun 2026 01:36:28 +0000MEDIUM 5.5: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on Git