CVE-2006-1902 fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison

What is CVE-2006-1902?

CVE-2006-1902 is a low-severity vulnerability in n/a, published on 20 Apr 2006.

Official description

fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_EXPR and NE_EXPR, which might introduce buffer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.NOTE: the vendor states that the essence of the issue is "not correctly interpreting an offset to a pointer as a signed value."

Weakness: CWE-119

Which versions are affected by CVE-2006-1902?

It affects 1 product.

Products include Gnu Gcc.

How do I fix CVE-2006-1902?

No fix has been published for CVE-2006-1902 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-1902 being exploited?

There is no known exploitation of CVE-2006-1902 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-12886 Security feature bypass in n/a High 8.1
• CVE-2002-2439 Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. High 7.8
• CVE-2019-15847 Weak cryptography in n/a High 7.5
• CVE-2008-1367 Memory corruption in n/a High 7.5
• CVE-2008-1685 Integer overflow in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-r8fv-8gwf-v44c.