CVE-2026-114469

EUVD-2026-124398
Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
GitLabCNA
4.4 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
gitgit
2.50.1
CNA
gitgit
2.51.2
CNA
gitgit
2.52.0
CNA
gitgit
2.53.0
CNA
gitgit
2.54.0
CNA
gitgit
2.55.0
CNA
gitgit
2.56.0
CNA
Debian logo
Debian Releases
Debian Product
Codename
git
bookworm
vulnerable
bookworm (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
git
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-all
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-core
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-core-debuginfo
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-core-doc
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-credential-libsecret
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-credential-libsecret-debuginfo
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-cvs
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-daemon
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-daemon-debuginfo
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-debuginfo
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-debugsource
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-email
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-gui
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-instaweb
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-p4
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-subtree
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
git-svn
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
gitk
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
gitweb
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
perl-Git
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
perl-Git-SVN
Amazon Linux 2
0:2.47.3-1.amzn2.0.2
fixed
Amazon Linux 2023
0:2.50.1-1.amzn2023.0.2
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://gitlab.com/gitlab-org/git/-/work_items/811