Skip to content
OpenAdvisories
Unscored CVE-2002-2439 EUVD-2002-2417GHSA-mm8j-7g3h-x2mj

Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.

Published Oct 23, 2019 · Updated Aug 8, 2024 · Assigned by redhat

Vendor: GNU Product: gcc Package: gcc-4.7 Package: gcc-4.7-armel-cross Package: gcc-4.7-armhf-cross Package: gcc-arm-linux-androideabi Package: gcc-arm-none-eabi Package: gcc-h8300-hms Package: gcc-i686-linux-android Package: gcc-mingw-w64 Package: gcc-msp430 Ecosystem: Ubuntu

Description

Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.

Affected products

VendorProductAffectedFixed
GNU gcc 4.8.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 gcc-h8300-hms +2 No fix yet —
Ubuntu 26.04 LTS gcc-h8300-hms +2 No fix yet —
Ubuntu 25.10 gcc-h8300-hms +2 No fix yet —
Ubuntu 24.04 LTS gcc-h8300-hms +2 No fix yet —
Ubuntu 22.04 LTS gcc-msp430 +3 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS gcc-msp430 +3 No fix yet —
Ubuntu 18.04 LTS gcc-msp430 +3 No fix yet —
Ubuntu 16.04 LTS gcc-4.7 +8 No fix yet —
Ubuntu 14.04 LTS gcc-4.7 +1 No fix yet —

References