CVE-2016-10128: LIBGIT2 Project LIBGIT2

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.

Affected products

• LIBGIT2 Project LIBGIT2: up to and including 0.24.5; version 0.25.0 only

Published 2017-03-24. Last modified 2026-06-17.