6.1
Medium
CVE-2026-118384 GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c
Description
GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mtools 4.0 | earliest → < 4.0.50 | 4.0.50 |