Unscored severity · published Apr 20, 2006
CVE-2006-1902
fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in…
–
CVSS
0.4%
EPSS
No
On KEV
Description
fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_EXPR and NE_EXPR, which might introduce buffer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.NOTE: the vendor states that the essence of the issue is "not correctly interpreting an offset to a pointer as a signed value."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GC
Gcc · Gnu
4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1902
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1902
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356896
gcc.gnu.org
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763
gcc.gnu.org
http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01297.html
gcc.gnu.org
http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01298.html
gcc.gnu.org
http://gcc.gnu.org/viewcvs/branches/gcc-4_1-branch/gcc/fold-const.c?r1=110549&r2=112698&pathrev=112698&diff_format=h
www.securityfocus.com
http://www.securityfocus.com/archive/1/431184/100/0/threaded
More from Gcc
8.1
CVE-2018-12886
stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction…
7.8
CVE-2021-37322
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c
7.8
CVE-2002-2439
Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts
7.5
CVE-2019-15847
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy…
6.5
CVE-2021-3826
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a…