Git Buffer Overflow Vulnerability in Wincred Credential Helper

A buffer overflow vulnerability has been identified in the Wincred credential helper of Git. This issue arises because the helper uses a static buffer as a unique key for storing and comparing credentials, but fails to properly check the available space in the buffer before appending data. This flaw allows for potential buffer overflows, which could be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, a common vulnerability that can be exploited to execute arbitrary code or cause a program to crash.

Remediation

Users are advised to upgrade to Git versions 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, or 2.50.1. If upgrading is not possible, avoid using the Wincred helper.