CYBERSECURITYTRACKER
Permanent story citation

Fwd: GNU mtools 4.0.50 released, fixes CVE-2026-118384

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11976

As cited

Copy frozen at (site build).

vulnerabilities

Fwd: GNU mtools 4.0.50 released, fixes CVE-2026-118384

GNU mtools version 4.0.50 addresses CVE-2026-118384, an out-of-bounds write vulnerability in the parse_vses function within vfat.c that affected prior versions through 4.0.49. The fix was released on October 30, 2026.

Why it matters: Users and administrators deploying GNU mtools should upgrade to 4.0.50 to patch the out-of-bounds write vulnerability that could allow memory corruption.

CVEsCVE-2026-118384
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary