CLEANSTART-2026-TN20078 DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables i...

🗓️ 31 Oct 2026 11:49:54Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 3 Views

Failure in GCC -fstack-protector for AArch64 allows exploitation of buffer overflows.

Reporter	Title	Published	Views	Family All 156
IBM Security Bulletins	Security Bulletin: Order Management is subject to various OS vulnerabilites which could have allowed attacker various entry points into application.	29 Apr 202502:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.1 has addressed security vulnerabilities	26 Dec 202321:15	–	ibm
attackerkb	CVE-2023-4039	13 Sep 202309:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-342)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gcc10 (ALAS-2023-2244)	13 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gcc (ALAS-2023-2245)	13 Sep 202300:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: gcc (CVE-2023-4039)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : gcc (EulerOS-SA-2023-3174)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : gcc (EulerOS-SA-2023-3209)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : gcc (EulerOS-SA-2023-3296)	16 Jan 202400:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TN20078.json
osv	www.osv.dev/vulnerability/CVE-2023-4039
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-4039

31 Oct 2026 16:04Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.14.8

EPSS0.01036

gcc -fstack-protector AArch64 buffer overflow