Debian Linux Security Advisory 3484-1 - Stepan Golosunov discovered that xdelta3, a diff utility which works with binary files, is affected by a buffer overflow vulnerability within the main_get_appheader function, which may lead to the execution of arbitrary code.
092897d5c817b1aa740e90a25d1710b333227949f37d0ba18586704e0de5f3ad
Ubuntu Security Notice 2901-1 - It was discovered that xdelta3 incorrectly handled certain files. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could use this issue to cause xdelta3 to crash, resulting in a denial of service, or possibly execute arbitrary code.
e00c2248b4bed3be1d356b36510c913e8a3573fd9c0cdc8d71c64adfb13c121a