CVE-2026-105437

Affected versions of Git are vulnerable to a heap-based buffer overflow in the three-way merge code (xdiff ). The issue stems from using a 32-bit signed integer to calculate merged output size; a large conflict-marker-size in a .gitattributes file can cause an integer wrap-around, leading Git to ...