CVE-2019-12495
CVE-2019-12495
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to a one-byte out-of-bounds write in the gsym_addr function in x86_64-gen.c. This occurs because tccasm.c mishandles section switches.
CVSS 5.5 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
tcc Debian:12
- Affected ranges
- ECOSYSTEM: < 0.9.27+git20200814.62c30a4a-1
Update to 0.9.27+git20200814.62c30a4a-1
tcc Debian:13
- Affected ranges
- ECOSYSTEM: < 0.9.27+git20200814.62c30a4a-1
Update to 0.9.27+git20200814.62c30a4a-1
tcc Ubuntu:16.04:LTS
- Versions
- 0.9.27~git20140923.9d7fb33-3ubuntu1
- 0.9.27~git20151227.933c223-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tcc Ubuntu:18.04:LTS
- Versions
- 0.9.27~git20161217.cd9514ab-3ubuntu1
- 0.9.27-2
- 0.9.27-4
- 0.9.27-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tcc Ubuntu:20.04:LTS
- Versions
- 0.9.27-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published