GCC runtime support library providing low-level routines that compiled programs depend on.
Version: 14.2.0-19
Type: Library
License:
| Expand | CVE | Title | Status | |
|---|---|---|---|---|
| CVE-2023-4039 Open CVE-2023-4039 in a new tab | **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself. | Not affected | Medium | |
| CVE-2026-102010 Open CVE-2026-102010 in a new tab | CVE-2026-102010 | Not affected | Unknown | |
| CVE-2026-114690 Open CVE-2026-114690 in a new tab | CVE-2026-114690 | Not affected | Unknown | |
| CVE-2026-114691 Open CVE-2026-114691 in a new tab | CVE-2026-114691 | Not affected | Unknown | |
| CVE-2026-115455 Open CVE-2026-115455 in a new tab | CVE-2026-115455 | Not affected | Unknown | |
| CVE-2026-115456 Open CVE-2026-115456 in a new tab | CVE-2026-115456 | Not affected | Unknown | |
| CVE-2026-95619 Open CVE-2026-95619 in a new tab | CVE-2026-95619 | Not affected | Unknown |
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.
CVE-2026-102010
CVE-2026-114690
CVE-2026-114691
CVE-2026-115455
CVE-2026-115456
CVE-2026-95619