Out-of-Bounds Read Vulnerability in Git by GitLab
CVE-2026-114469

4.4MEDIUM

Key Information:

Vendor

Git

Status
Git
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114469?

An out-of-bounds read vulnerability in Git by GitLab can lead to crashes when using git-apply(1) with binary patches that inflate to an excessively large size. This issue occurs due to improper handling of memory accesses, which could be exploited to disrupt system functionality while processing large binary files. Users are advised to apply available patches and maintain updated versions of the product to safeguard against potential disruptions.

Affected Version(s)

Git 2.50.1

Git 2.51.2

Git 2.52.0

References

https://gitlab.com/gitlab-org/git/-/work_items/811

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ehdgks0627, un3xploitable
.