Description
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mingw | mingw-w64 | 5.0.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mingw-w64 | No fix yet | — |
| Debian 13 | mingw-w64 | No fix yet | — |
| Debian 12 | mingw-w64 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | mingw-w64 | No fix yet | — |
| Ubuntu 26.04 LTS | mingw-w64 | No fix yet | — |
| Ubuntu 25.10 | mingw-w64 | No fix yet | — |
| Ubuntu 24.04 LTS | mingw-w64 | No fix yet | — |
| Ubuntu 22.04 LTS | mingw-w64 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | mingw-w64 | No fix yet | — |
| Ubuntu 18.04 LTS | mingw-w64 | No fix yet | — |
| Ubuntu 16.04 LTS | mingw-w64 | No fix yet | — |
| Ubuntu 14.04 LTS | mingw-w64 | No fix yet | — |
References
- VU#307144 third-party-advisory