HSEC-2025-0001 Subword division operations may produce incorrect results
The GHC compiler may generate incorrect subword division results with optimizations, potentially causing data integrity issues or buffer overflows.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is HSEC-2025-0001?
HSEC-2025-0001 is a vulnerability in ghc, published on 14 Nov 2025.
Official description
Subword division operations may produce incorrect results
Arithmetic operations may produce incorrect results when compiled with optimizations. For the most part, this bug only causes availability and data integrity issues. However, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.
Which versions are affected by HSEC-2025-0001?
1 open source package ship an affected version, including ghc.
| Package | Affected | Fixed in |
|---|---|---|
ghc GHC | From 9.12.1 | 9.12.2, 9.12.4 |
How do I fix HSEC-2025-0001?
Upgrade ghc to a fixed version for your release line: 9.12.2 or 9.12.4.
Is HSEC-2025-0001 being exploited?
There is no known exploitation of HSEC-2025-0001 in the wild and no public exploit code.