Vulnerability record/PUBLISHED/Published Oct 28, 2026 02:53:38 UTC
CVE-2026-118384
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
Base score6.1/ 10
SeverityMediumCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorLocalAV
Attack complexityLowAC
Privileges requiredNonePR
User interactionRequiredUI
ScopeUnchangedS
Confidentiality impactNoneC
Integrity impactLowI
Availability impactHighA
CVSS vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:HCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritymitre
Last updatedOct 28, 2026 03:01:38 UTC
PublishedOct 28, 2026 02:53:38 UTC
ReservedOct 28, 2026 02:53:38 UTC