CVE-2026-109349 | GitoxideLabs gix-pack up to 0.74.x Pack Header Decoder new_from_header assertion

October 12, 2026 Yanac

A vulnerability was found in GitoxideLabs gix-pack up to 0.74.x and classified as problematic. This vulnerability affects the function BytesToEntriesIter::new_from_header of the component Pack Header Decoder. Such manipulation leads to reachable assertion.

This vulnerability is traded as CVE-2026-109349. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More