GC
Product
GCC
14
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add GCC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-12886 | 8.1 | May 22 | stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction… Affected: 4.1 through 8.0 |
| CVE-2021-37322 | 7.8 | Nov 18 | GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c Affected: before 10.1 |
| CVE-2002-2439 | 7.8 | Oct 23 | Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts Affected: before 4.8.0 |
| CVE-2019-15847 | 7.5 | Sep 2 | The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy… Affected: before 7.5.0; 8.0 before 8.4.0; 9.0 before 9.3.0; 10.0 before 10.1.0 |
| CVE-2021-3826 | 6.5 | Sep 1 | Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a… Affected: 11.2 |
| CVE-2022-27943 | 5.5 | Mar 26 | libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new Affected: 11.2 |
| CVE-2021-46195 | 5.5 | Jan 14 | GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c Affected: 12.0 |
| CVE-2023-4039 | 4.8 | Sep 13 | GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 Affected: All versions of GCC that target AArch64 when option -fstack-protector is used |
| CVE-2017-11671 | 4.0 | Jul 26 | Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate… Affected: 4.6; 4.7; 4.8; 4.9; 5.0; 5.1; +7 more |
| CVE-2015-5276 | – | Nov 17 | The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier… Affected: before 4.9.4 |
| CVE-2008-1685 | – | Apr 6 | gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.2.4; 4.3.0 |
| CVE-2008-1367 | – | Mar 17 | gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction… Affected: 4.3 |
| CVE-2006-1902 | – | Apr 20 | fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in… Affected: 4.1 |
| CVE-2000-1219 | – | Nov 1 | The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to… Affected: through 3.3.3 |
Showing 14