Arm Gnu Toolchain
Approved changes feed: RSS · Atom
cpe:2.3:a:arm_ltd:arm_gnu_toolchain:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Arm Ltd (1e91e0fc-e9b8-5c76-a9af-f78f0a93dc5e) |
|---|---|
| Product | Arm Gnu Toolchain (47204997-4e55-58e9-95d2-db49d191ce4d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4039 |
vulnerable | 2026-06-03 14:53:27.097920 |
GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
MEDIUM (4.8)
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains
that target AArch64 allows an attacker to exploit an existing buffer
overflow in dynamically-sized local variables in your application
without this being detected. This stack-protector failure only applies
to C99-style dynamically-sized local variables or those created using
alloca(). The stack-protector operates as intended for statically-sized
local variables.
The default behavior when the stack-protector
detects an overflow is to terminate your application, resulting in
controlled loss of availability. An attacker who can exploit a buffer
overflow without triggering the stack-protector might be able to change
program flow control to cause an uncontrolled loss of availability or to
go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.
Published: 2023-09-13T08:05:10.274Z
Updated: 2025-02-13T17:07:49.159Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.