CVE-2026-56288

Name of the Vulnerable Software and Affected Versions GNU patch (affected versions not specified)

Description Improper handling of consecutive end-of-file newline markers when processing a specially crafted unified-diff patch file can corrupt internal hunk data structures. A hunk is a single block of changes within a diff file. This corruption leads to a NULL pointer dereference, where the application passes a NULL pointer to the fwrite() function, causing the utility to crash and resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.