In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c.
{ "urgency": "unimportant" }