CVE-2024-24577

A flaw was found in libgit2, a cross-platform, linkable library implementation of Git. A specially crafted payload to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. The attacker must be able to trigger two consecutive calls to gitindexadd with a filena...