GNU patch vulnerabilities (CVE)

CVE records published for GNU patch, newest first. Follow to get an email when a new one appears.

2 results
4.6Medium
CVE-2026-56289

Loop with Unreachable Exit Condition in GNU patch

GNU patch

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to ente…

4.6Medium
CVE-2026-56288

NULL Pointer Dereference in GNU patch

GNU patch

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causin…