CVE-2008-3546: Git

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.

Affected products

• Git Git: version 1.5.5.3 only; version 1.5.5.4 only; version 1.5.6.1 only; version 1.5.6.2 only; version 1.5.6.3 only

Published 2008-08-07. Last modified 2026-06-16.