CVE-2026-118384 — Vulnerability intelligence

—

Published: 2026-10-28T03:17:14.757

CVSS

6.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.

Sources

• CVE-2026-118384
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory