An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-6951.json"