{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"patch","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NDGHG56VAC7R8VBBFP66HE","modified_at":"2026-10-23T18:03:23.376062964Z","published_at":"2018-02-13T19:29:00.573Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-6952","https://security-tracker.debian.org/tracker/CVE-2018-6952"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-6952#Debian:14/patch","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-6952"}],"summary":"A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6."}