ALPINE-CVE-2026-114469: Medium severity alpine/git vulnerability
Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/gitto a version that resolves this vulnerability.Fixed in 2.52.1-r0 - Upgrade
Upgrade
alpine/gitto a version that resolves this vulnerability.Fixed in 2.54.1-r0
Event History
Frequently Asked Questions
What does an attacker need to do to trigger the issue?
An attacker needs to persuade a user to run git-apply(1) on a binary patch that inflates to a very large size. The attack requires user interaction but no privileges.
Who is exposed?
Systems using the alpine/git package are exposed when users apply untrusted or attacker-supplied binary patches with git-apply(1). The provided data does not identify affected or fixed package versions.
What is the likely impact?
The out-of-bounds read can crash git-apply(1), causing a denial of service. The supplied severity vector also indicates limited confidentiality impact, but does not provide further detail on data exposure.