EUVD-2026-124400

Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...

CVE-2026-114467 Out-of-bounds Write in Git

Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...

CVE-2026-114467

A flaw in Git allows an authenticated remote attacker to cause a Denial of Service (DoS) by corrupting stack memory. The vulnerability occurs during merge operations when git-merge(1) attempts to remove more than two GPG (GNU Privacy Guard) signatures from commit messages. An attacker can trigger...