Mercuria mpatch_apply Data Compromise

The vulnerability of the mpatchapply function in the Mercuria version control tool is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

mercurial: Buffer underflow in mpatch.c:mpatch_apply()

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002...

PT-2018-3611

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 4.6.1 Description The issue is related to the mpatch apply function in mpatch.c, which incorrectly proceeds when the fragment start is past the end of the original data. This is due to a lack of input validation...