Quick answers
- Is CVE-2026-84270 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-84270 being exploited in the wild.
- How severe is CVE-2026-84270?
- Medium severity, with a CVSS score of 4.3, published 1 September 2026.
- Which products and versions are affected?
- Gnome Gvfs <UNKNOWN>.
- Is there a fix for CVE-2026-84270?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-84270 attacked?
- It is attacked with physical access, in a software library.
- Am I affected by CVE-2026-84270?
- Check whether you run Gnome Gvfs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a buffer overflow in the MTP backend's do_read() function in gvfsbackendmtp.c. The root cause is that the code trusts the data length returned by an MTP device without validating it against the original request size. When a malicious MTP device responds with more bytes than requested, this unchecked length is passed directly to memcpy(), causing an out-of-bounds read that crashes the gvfsd-mtp daemon. The attack requires physical access to connect a malicious MTP device; no authentication or network access is required. An attacker can achieve denial of service by triggering a segmentation fault when any file is read from the compromised device.
Affected products
- GNOME gvfs <UNKNOWN>
Timeline
- 2026-09-01: disclosed