Integer Overflow in libgit2 Affects Multiple Applications

CVE-2018-10887

What is CVE-2018-10887?

A flaw discovered in libgit2 prior to version 0.27.3 involves an unexpected sign extension in the git_delta_apply function within the delta.c file. This flaw can result in an integer overflow, potentially leading to an out of bounds read. As a consequence, attackers may exploit this vulnerability to leak sensitive memory addresses or trigger service interruptions. It’s essential to address this issue promptly by updating to the latest version to ensure system integrity and security.

References