The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libitm-develUpgrade gccUpgrade gcc-plugin-develUpgrade gcc-gdb-pluginUpgrade libstdc++-docsUpgrade gcc-c++Upgrade cppUpgrade libquadmath-develUpgrade libstdc++-staticUpgrade gcc-gfortranUpgrade gcc-offload-nvptxUpgrade libstdc++-devel | May 4, 2022 | Jan 4, 2019 |
| Centos_linux | — | Upgrade libitmUpgrade gcc-gfortranUpgrade gcc-debugsourceUpgrade gcc-plugin-devel-debuginfoUpgrade libgomp-debuginfoUpgrade libitm-debuginfoUpgrade libstdc++-docsUpgrade libstdc++Upgrade libstdc++-debuginfoUpgrade libatomicUpgrade libubsanUpgrade cpp-debuginfoUpgrade libubsan-debuginfoUpgrade libatomic-debuginfoUpgrade libgfortran-debuginfoUpgrade libatomic-staticUpgrade libgccUpgrade libasan-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade libgfortranUpgrade libitm-develUpgrade gcc-gdb-pluginUpgrade libasanUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-c++-debuginfoUpgrade libgcc-debuginfoUpgrade gcc-c++Upgrade libgompUpgrade gccUpgrade libstdc++-develUpgrade cppUpgrade gcc-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Jan 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jan 4, 2019 |
| Oracle_linux | — | Upgrade libstdc++-staticUpgrade liblsanUpgrade libitmUpgrade cppUpgrade libstdc++-develUpgrade libtsanUpgrade libasanUpgrade libgccUpgrade gcc-gfortranUpgrade gcc-gdb-pluginUpgrade libquadmath-develUpgrade libatomicUpgrade libgfortranUpgrade libstdc++Upgrade libgompUpgrade gcc-c++Upgrade libgomp-offload-nvptxUpgrade gccUpgrade libstdc++-docsUpgrade libatomic-staticUpgrade gcc-offload-nvptxUpgrade libquadmathUpgrade gcc-plugin-develUpgrade libitm-develUpgrade libubsan | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade libubsan-debuginfoUpgrade gcc-gfortranUpgrade liblsan-debuginfoUpgrade libstdc++-staticUpgrade gcc-debuginfoUpgrade libgcc-debuginfoUpgrade cppUpgrade gcc-c++-debuginfoUpgrade libgompUpgrade libgomp-offload-nvptx-debuginfoUpgrade gcc-gdb-pluginUpgrade libasanUpgrade liblsanUpgrade libitm-develUpgrade gcc-debugsourceUpgrade gccUpgrade libitmUpgrade libtsan-debuginfoUpgrade libstdc++-develUpgrade libatomic-debuginfoUpgrade gcc-c++Upgrade libgfortranUpgrade libatomicUpgrade gcc-gfortran-debuginfoUpgrade libgomp-offload-nvptxUpgrade libgfortran-debuginfoUpgrade libatomic-staticUpgrade gcc-offload-nvptx-debuginfoUpgrade libasan-debuginfoUpgrade libstdc++-docsUpgrade gcc-offload-nvptxNo solution existsUpgrade libstdc++Upgrade libubsanUpgrade libquadmath-develUpgrade libtsanUpgrade libstdc++-debuginfoUpgrade libgccUpgrade libquadmath-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade libitm-debuginfoUpgrade cpp-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade gcc-plugin-develUpgrade libquadmathUpgrade libgomp-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Rocky_linux | — | Upgrade libatomic-debuginfoUpgrade libquadmathUpgrade libstdc++-develUpgrade gcc-plugin-develUpgrade libtsan-debuginfoUpgrade libtsanUpgrade libgompUpgrade libitm-develUpgrade liblsan-debuginfoUpgrade libitmUpgrade gcc-gdb-pluginUpgrade gcc-offload-nvptx-debuginfoUpgrade libstdc++-debuginfoUpgrade libgomp-debuginfoUpgrade libgomp-offload-nvptxUpgrade libasan-debuginfoUpgrade libatomic-staticUpgrade libitm-debuginfoUpgrade gcc-debugsourceUpgrade gcc-plugin-devel-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade libstdc++-docsUpgrade gcc-gdb-plugin-debuginfoUpgrade libubsanUpgrade gcc-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade libubsan-debuginfoUpgrade libstdc++Upgrade gccUpgrade gcc-offload-nvptxUpgrade libgcc-debuginfoUpgrade libasanUpgrade liblsanUpgrade libatomicUpgrade libgfortran-debuginfoUpgrade gcc-c++Upgrade libstdc++-staticUpgrade cppUpgrade gcc-gfortranUpgrade libgfortranUpgrade gcc-c++-debuginfoUpgrade cpp-debuginfoUpgrade libquadmath-debuginfoUpgrade libgccUpgrade libquadmath-devel | Mar 12, 2024 | Jan 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub