CVE-2026-118384

Medium

GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.

mitre·CWE-839·Published 2026-10-28

CVSS

6.1

EPSS

0.00

KEV

Exploits

cve.orgen

76 chars

GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.

NVDen

76 chars

GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.1	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
3.1	Secondary	NVD	6.1	1.8	4.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H