cve/2022/CVE-2022-30785.md

### [CVE-2022-30785](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30785)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.

### POC

#### Reference
- http://www.openwall.com/lists/oss-security/2022/06/07/4
- https://github.com/tuxera/ntfs-3g/releases
- https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-6mv4-4v73-xw58

#### Github
- https://github.com/ARPSyndicate/cvemon