Buffer overflow in Git - CVE-2025-48386

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU112639

Buffer overflow in Git - CVE-2025-48386

Published: July 9, 2025


Vulnerability identifier: #VU112639
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-48386
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in wincred credential helper. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows.


Affected software

Git
Gentoo Linux
Ubuntu
openEuler
Anolis OS
Fedora
Visual Studio
git (Ubuntu package)
git-svn
git
git-daemon
git-debuginfo
git-web
gitk
perl-Git
perl-Git-SVN
git-debugsource
git-email
git-gui
git-help
git-core
git-subtree
git-credential-libsecret
git-all
git-core-doc
git-instaweb
git-p4
gitweb
dev-vcs/git

How to mitigate CVE-2025-48386

Install updates from vendor's website.

Git - addressed in versions 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, 2.50.1
Visual Studio - addressed in versions 15.9.75 15.9.75, 16.11.49 16.11.49, 17.8.23 17.8.23, 17.10.17 17.10.17, 17.12.10 17.12.10
git (Ubuntu package) - addressed in versions 1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1
git-svn - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-daemon - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-debuginfo - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-web - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
gitk - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
perl-Git - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
perl-Git-SVN - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-debugsource - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-email - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-gui - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-help - addressed in versions 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9
git-core - addressed in versions 2.33.0-18, 2.33.0-19, 2.43.0-9
git-subtree - update to 2.47.3-1
perl-Git - update to 2.47.3-1
git - update to 2.47.3-1
git-core - update to 2.47.3-1
git-credential-libsecret - update to 2.47.3-1
git-daemon - update to 2.47.3-1
git-all - update to 2.47.3-1
git-core-doc - update to 2.47.3-1
git-email - update to 2.47.3-1
git-gui - update to 2.47.3-1
git-instaweb - update to 2.47.3-1
git-p4 - update to 2.47.3-1
git-svn - update to 2.47.3-1
gitk - update to 2.47.3-1
gitweb - update to 2.47.3-1
perl-Git-SVN - update to 2.47.3-1
dev-vcs/git - update to 2.49.1
git - addressed in versions 2.50.1-1.fc41, 2.50.1-1.fc42

External References

Related Security Bulletins