OESA-2026-4678

    Dashboard / Vulnerabilities / OESA-2026-4678

    OESA-2026-4678

    Published: 4 Nov 2026Last Modified: 4 Nov 2026
    Upstream:
    CVE-2026-118384

    Summary: mtools security update

    Details: Mtools is a collection of utilities to access MS-DOS disks from GNU and Unix without mounting them. It supports Win'95 style long file names, OS/2 Xdf disks and 2m disks (store up to 1992k on a high density 3 1/2 disk) In addition to file access, it supports many FAT-specific features: volume labels, FAT-specific file attributes (hidden, system, ...), "bad block" map maintenance, access to remote floppy drives, Iomega ZIP disk protection, "secure" erase, display of file's on-disk layout, etc Security Fix(es): GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.(CVE-2026-118384)

    References: https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4678, https://nvd.nist.gov/vuln/detail/CVE-2026-118384

    Affected packages

    Package

    Name: mtools

    Purl: pkg:rpm/openEuler/mtools&distro=openEuler-24.03-LTS-SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.0.43-3.oe2403sp3

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OESA-2026-4678 | CVE-DB