https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-4039.htmlhttps://patchthecve.com/cve/CVE-2023-4039.htmlWed, 14 Oct 2026 22:17:17 +0000MEDIUM 4.8: **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-stylhttps://patchthecve.com/cve/CVE-2021-3826.htmlhttps://patchthecve.com/cve/CVE-2021-3826.htmlWed, 14 Oct 2026 10:17:48 +0000MEDIUM 6.5: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.https://patchthecve.com/cve/CVE-2022-27943.htmlhttps://patchthecve.com/cve/CVE-2022-27943.htmlWed, 14 Oct 2026 17:17:37 +0000MEDIUM 5.5: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.https://patchthecve.com/cve/CVE-2021-46195.htmlhttps://patchthecve.com/cve/CVE-2021-46195.htmlWed, 14 Oct 2026 13:17:12 +0000MEDIUM 5.5: GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.https://patchthecve.com/cve/CVE-2021-37322.htmlhttps://patchthecve.com/cve/CVE-2021-37322.htmlWed, 17 Jun 2026 04:00:22 +0000HIGH 7.8: GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.https://patchthecve.com/cve/CVE-2002-2439.htmlhttps://patchthecve.com/cve/CVE-2002-2439.htmlTue, 16 Jun 2026 22:01:18 +0000HIGH 7.8: Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.https://patchthecve.com/cve/CVE-2019-15847.htmlhttps://patchthecve.com/cve/CVE-2019-15847.htmlWed, 14 Oct 2026 07:16:46 +0000HIGH 7.5: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a singlehttps://patchthecve.com/cve/CVE-2018-12886.htmlhttps://patchthecve.com/cve/CVE-2018-12886.htmlWed, 14 Oct 2026 07:16:41 +0000HIGH 8.1: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypashttps://patchthecve.com/cve/CVE-2017-11671.htmlhttps://patchthecve.com/cve/CVE-2017-11671.htmlWed, 17 Jun 2026 01:02:11 +0000MEDIUM 4.0: Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially https://patchthecve.com/cve/CVE-2015-5276.htmlhttps://patchthecve.com/cve/CVE-2015-5276.htmlWed, 17 Jun 2026 00:28:48 +0000MEDIUM 5.0: The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.https://patchthecve.com/cve/CVE-2013-4598.htmlhttps://patchthecve.com/cve/CVE-2013-4598.htmlTue, 16 Jun 2026 23:57:33 +0000MEDIUM 5.0: The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors.