GNU GCC
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-4039 | All versions of GCC that target AArch64 when option -fstack-protector is used | GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 | MEDIUM 4.8 | 1.0 % | ||
| CVE-2002-2439 | 4.8.0 | Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. | HIGH 7.8 | 0.5 % |