Integer overflow in Gnu Diffutils

CVE-2026-53910

diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for me…

Vulnerability class: Integer Overflow

Affected products

Weakness classification (CWE)

References