Git rejects patches larger than roughly 1 GiB, but that check only considered the size of the patch as it appears in the input. Binary patches are compressed and encoded, so a binary patch that inflates to a very large size slipped past the check and crashed Git with an out-of-bounds read in patch_delta() when the truncated delta size exceeded the real buffer length. Triggered by applying an attacker-supplied patch (e.g. git apply) containing a binary diff that inflates far beyond 1 GiB. Fixed in Git 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1 and 2.56.1.