The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cppUpgrade libquadmath-develUpgrade gcc-gfortranUpgrade gcc-offload-nvptxUpgrade libstdc++-staticUpgrade libstdc++-develUpgrade libitm-develUpgrade gcc-gdb-pluginUpgrade gcc-c++Upgrade libstdc++-docsUpgrade gccUpgrade gcc-plugin-devel | May 4, 2022 | Jan 4, 2019 |
| Centos_linux | — | Upgrade gcc-gdb-plugin-debuginfoUpgrade gcc-debuginfoUpgrade libgcc-debuginfoUpgrade libgompUpgrade gcc-gdb-pluginUpgrade gccUpgrade libasanUpgrade gcc-gfortran-debuginfoUpgrade libgfortranUpgrade libitm-develUpgrade libstdc++-develUpgrade gcc-c++-debuginfoUpgrade gcc-c++Upgrade cppUpgrade libasan-debuginfoUpgrade libatomic-staticUpgrade gcc-debugsourceUpgrade libatomicUpgrade libstdc++-docsUpgrade gcc-gfortranUpgrade libatomic-debuginfoUpgrade libgfortran-debuginfoUpgrade libgccUpgrade libubsanUpgrade libstdc++Upgrade libitmUpgrade libgomp-debuginfoUpgrade cpp-debuginfoUpgrade libubsan-debuginfoUpgrade libitm-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libstdc++-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Jan 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jan 4, 2019 |
| Oracle_linux | — | Upgrade gcc-objc++Upgrade gccUpgrade libstdc++-docsUpgrade libobjcUpgrade libatomic-staticUpgrade libtsan-staticUpgrade libasan-staticUpgrade libquadmathUpgrade gcc-plugin-develUpgrade libgccUpgrade libitmUpgrade libstdc++-staticUpgrade libgo-staticUpgrade libatomicUpgrade libquadmath-staticUpgrade gcc-gfortranUpgrade libstdc++-develUpgrade cppUpgrade libitm-staticUpgrade gcc-gdb-pluginUpgrade libgo-develUpgrade libgompUpgrade gcc-c++Upgrade libstdc++ | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade gcc-debugsourceUpgrade gcc-gfortran-debuginfoUpgrade libstdc++-staticUpgrade libgcc-debuginfoUpgrade libatomic-debuginfoUpgrade libgompUpgrade gcc-c++-debuginfoUpgrade cppUpgrade libgfortranUpgrade liblsanUpgrade libasanUpgrade libitm-develUpgrade liblsan-debuginfoUpgrade gccUpgrade gcc-debuginfoUpgrade libstdc++-develUpgrade libgomp-offload-nvptx-debuginfoUpgrade libubsan-debuginfoUpgrade gcc-c++Upgrade libatomicUpgrade gcc-gfortranUpgrade libitmUpgrade libgomp-offload-nvptxUpgrade libtsan-debuginfoUpgrade gcc-gdb-pluginUpgrade libquadmath-debuginfoUpgrade libitm-debuginfoUpgrade libstdc++-debuginfoNo solution existsUpgrade gcc-plugin-devel-debuginfoUpgrade libgccUpgrade gcc-plugin-develUpgrade gcc-gdb-plugin-debuginfoUpgrade libasan-debuginfoUpgrade libgfortran-debuginfoUpgrade libtsanUpgrade libubsanUpgrade gcc-offload-nvptxUpgrade libquadmathUpgrade libstdc++Upgrade libatomic-staticUpgrade cpp-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libgomp-debuginfoUpgrade libquadmath-develUpgrade libstdc++-docs | Nov 10, 2021 | Jan 4, 2019 |
| Rocky_linux | — | Upgrade gcc-c++-debuginfoUpgrade cppUpgrade gcc-c++Upgrade gcc-gfortranUpgrade libquadmath-develUpgrade libgfortran-debuginfoUpgrade libgccUpgrade cpp-debuginfoUpgrade libasanUpgrade libgfortranUpgrade libatomicUpgrade liblsanUpgrade libstdc++-staticUpgrade libquadmath-debuginfoUpgrade libubsan-debuginfoUpgrade gcc-debuginfoUpgrade libstdc++-develUpgrade libstdc++Upgrade libquadmathUpgrade libatomic-debuginfoUpgrade gcc-offload-nvptxUpgrade gccUpgrade libgcc-debuginfoUpgrade libgomp-debuginfoUpgrade libtsan-debuginfoUpgrade libubsanUpgrade gcc-debugsourceUpgrade libitm-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-plugin-develUpgrade libtsanUpgrade libstdc++-debuginfoUpgrade libgompUpgrade gcc-gdb-pluginUpgrade liblsan-debuginfoUpgrade libitm-develUpgrade libitmUpgrade gcc-offload-nvptx-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libatomic-staticUpgrade libgomp-offload-nvptx-debuginfoUpgrade libgomp-offload-nvptxUpgrade libasan-debuginfoUpgrade libstdc++-docs | Mar 12, 2024 | Jan 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub