CVE-2021-3826

CVE-2021-3826 is a heap/stack buffer overflow in libiberty’s dlang_lname function (d-demangle.c). A crafted mangled symbol can trigger a segmentation fault and crash, causing a denial of service. The issue is associated with GCC/binutils’ libiberty/demangling code and has been addressed in vendor...

CVE-2008-1685

CVE-2008-1685 affects GNU Compiler Collection versions 4.2.0–4.3.0. The issue is that when casts are not used, the sum of a pointer and an int may be considered >= the pointer, which can lead to removal of length-testing code intended as protection against integer overflow and buffer overflow,...