Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
CVE-2026-123533
Summary
Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.
Products covered
Nuance PowerScribe 360 version 4.0.5
Nuance PowerScribe 360 version 4.0.6
Nuance PowerScribe 360 version 4.0.7
Nuance PowerScribe 360 version 4.0.8
Nuance PowerScribe 360 version 4.0.9
Nuance PowerScribe One version 2019.1
Nuance PowerScribe One version 2019.2
Nuance PowerScribe One version 2019.3
Show 14 more products
Nuance PowerScribe 360 4.0
Nuance PowerScribe 360 version 4.0.1
Nuance PowerScribe 360 version 4.0.2
Nuance PowerScribe 360 version 4.0.3
Nuance PowerScribe 360 version 4.0.4
Nuance PowerScribe One version 2019.4
Nuance PowerScribe One version 2019.5
Nuance PowerScribe One version 2019.6
Nuance PowerScribe One version 2019.7
Nuance PowerScribe One version 2019.8
Nuance PowerScribe One version 2019.9
Nuance PowerScribe One version 2019.10
PowerScribe One version 2023.1 SP2 Patch 11
PowerScribe One version 2023.1 SP3 Patch 6
Remediation
Release Notes
Vendor-listed fixes
7.0.243.19
7.0.277.28
7.0.316.12
7.0.427.15
7.0.528.24
2019.1.96.6
2019.2.9.11
2019.3.16.21
Show 14 more fixes
7.0.11.49
7.0.111.68
7.0.154.18
7.0.197.10
7.0.212.10
2019.4.9.17
2019.5.14.40
2019.6.36.40
2019.7.107.26
2019.8.43.19
2019.9.31.23
2019.10.36.14
2023.2.3054
2023.3.9072
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.