CVE-2026-53587 | libgit2 up to 1.8.5/1.9.4 Smart Protocol Transport smart_pkt.c set_data input validation

August 20, 2026 Yanac

A vulnerability described as problematic has been identified in libgit2 up to 1.8.5/1.9.4. This affects the function set_data of the file src/libgit2/transports/smart_pkt.c of the component Smart Protocol Transport. The manipulation results in improper input validation.

This vulnerability is identified as CVE-2026-53587. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More