VYPR

diff3

by GNU

CVEs (1)

  • CVE-2026-53910LowJul 22, 2026
    risk 0.14cvss epss 0.00

    diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds.…