22 results · Feed
-
Medium 4.2
Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.
A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigg…
-
Low 3.7
Gcc: out-of-bounds read in std::from_chars
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, poten…
-
Medium 6.5
Gcc: stack overflow in std::bitset on libstdc++
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an …
-
Medium 5.9
Gcc: integer wrap in `std
A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the conta…
-
Medium 6.2
Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compil…
-
High 7.0
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit…
-
High 7.7
Gcc: libstdc++ integer overflow in `new` operator
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application in…
-
Medium 4.8
GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-prote…
-
Medium 5.5
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
-
Unscored —
A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).
-
Unscored —
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow u…
-
Unscored —
Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.
-
Unscored —
Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4…
-
Unscored —
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault…
-
Unscored —
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segment…
-
Unscored —
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and …
-
Unscored —
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of servic…
-
Unscored —
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and …
-
Unscored —
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attac…
-
Unscored —
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentat…
-
Unscored —CVE-2016-2226 Public exploit
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrar…
-
Unscored —
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and…