Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file.
CVSS 3.0HIGH 8.8·Network·No auth·User interaction·EPSS 0.04157·Published 2016-04-19·Will not fixCWE-119