CVE-2026-84270: gnome gvfs Out-of-bounds Read
Vulnerability summary
CVE-2026-84270 is a medium (CVSS 4.3) Out-of-bounds Read vulnerability in gnome gvfs. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 01-09-2026PublishedVulnerability first disclosed.
- 02-09-2026Last modifiedVulnerability information updated.
Description
A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length returned by the device without limiting it to the original size requested by the client. If a malicious MTP device responds with more bytes than requested, this unrestricted length is passed directly to memcpy(). This causes the operation to read memory outside the intended boundaries. This allows an attacker who plugs in a malicious MTP device to cause a segmentation fault when a file is read and crash the gvfsd-mtp process, resulting in a denial of service.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- NVDNIST4.3MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
+0.07 pp
From 0.15% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- gvfsAll versions (No fix recorded) | < 1.62.0-1
Gnome1 product
- gvfs< 1.60.2
Ubuntu1 product
- gvfsAll versions (No fix recorded)
3 vendors · 3 products
