Stepan Golosunov discovered that xdelta3, a diff utility which works
with binary files, is affected by a buffer overflow vulnerability within
the main_get_appheader function, which may lead to the execution of
arbitrary code.