{"id":"CVE-2026-114467","kind":"vulnerability","aliases":["CVE-2026-114467"],"related":[],"title":"Git: merging a tag with over two GPG signatures writes out of bounds","description":"Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures","summary":"Running git-merge on a tag that carries more than two GPG signatures triggers an out-of-bounds memory write in Git. The sources do not say whether this leads to code execution or only a crash.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"git","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["git","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-12T14:17:23+00:00","first_seen_at":"2026-11-12T14:38:36+00:00","triaged_at":"2026-11-12T14:39:11+00:00","updated_at":"2026-11-12T14:39:11+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-12T14:39:11Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Git: merging a tag with over two GPG signatures writes out of bounds","impact":"low","summary":"Running git-merge on a tag that carries more than two GPG signatures triggers an out-of-bounds memory write in Git. The sources do not say whether this leads to code execution or only a crash.","audience":"developers","category":"other","nicknames":[],"who_cares":["git"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; out-of-bounds write in git merge","analyst_note":"Check the Git project's security announcement and the NVD entry for the affected versions, fixed versions and whether the write is exploitable beyond a crash.","how_to_check":"unknown","plain_action":"","product_name":"git","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000629,"input_tokens":4487,"output_tokens":361,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-114467':16A,19A '-2026':15A,18A '1':73C 'bound':13A,41B,64C 'carri':30B 'code':55B 'crash':60B 'cve':14A,17A 'execut':56B 'git':1A,20A,21B,24B,45B,68C,71C 'git-merg':23B,70C 'gpg':8A,34B,81C 'lead':53B 'memori':42B 'merg':2A,25B,72C 'out-of-bound':38B,61C 'possibl':66C 'run':22B 'say':50B 'signatur':9A,35B,82C 'sourc':47B 'tag':4A,28B,76C 'trigger':36B 'two':7A,33B,80C 'use':74C 'whether':51B 'write':10A,43B,65C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["git"],"ptokens":["git"],"labels":["git","low","other","vendor"],"campaign_type":null,"search_a":"'-114467':16A,19A '-2026':15A,18A 'bound':13A 'cve':14A,17A 'git':1A,20A 'gpg':8A 'merg':2A 'signatur':9A 'tag':4A 'two':7A 'write':10A","search_b":"'bound':41B 'carri':30B 'code':55B 'crash':60B 'execut':56B 'git':21B,24B,45B 'git-merg':23B 'gpg':34B 'lead':53B 'memori':42B 'merg':25B 'out-of-bound':38B 'run':22B 'say':50B 'signatur':35B 'sourc':47B 'tag':28B 'trigger':36B 'two':33B 'whether':51B 'write':43B","search_c":"'1':73C 'bound':64C 'git':68C,71C 'git-merg':70C 'gpg':81C 'merg':72C 'out-of-bound':61C 'possibl':66C 'signatur':82C 'tag':76C 'two':80C 'use':74C 'write':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T14:17:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss_by":"cve@gitlab.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114467","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114467","severity":null,"published_at":"2026-11-12T14:17:23+00:00","modified_at":"2026-11-12T14:17:23+00:00","first_seen_at":"2026-11-12T14:38:36+00:00","fetched_at":"2026-11-12T14:38:36+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}