Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures
CWE-787