PT-2025-28649 · Git+4 · Git+4
Dgl
·
Published
2025-07-08
·
Updated
2025-10-09
·
CVE-2025-48386
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Git versions prior to 2.43.7
Git versions prior to 2.44.4
Git versions prior to 2.45.4
Git versions prior to 2.46.4
Git versions prior to 2.47.3
Git versions prior to 2.48.2
Git versions prior to 2.49.1
Git versions prior to 2.50.1
Description:
The wincred credential helper in Git does not properly bounds check the available space remaining in a static buffer before appending to it with wcsncat(), leading to potential buffer overflows.
Recommendations:
For versions prior to 2.43.7, update to version 2.43.7 or later.
For versions prior to 2.44.4, update to version 2.44.4 or later.
For versions prior to 2.45.4, update to version 2.45.4 or later.
For versions prior to 2.46.4, update to version 2.46.4 or later.
For versions prior to 2.47.3, update to version 2.47.3 or later.
For versions prior to 2.48.2, update to version 2.48.2 or later.
For versions prior to 2.49.1, update to version 2.49.1 or later.
For versions prior to 2.50.1, update to version 2.50.1 or later.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Git
Linuxmint
Ubuntu