CVE-2021-46195
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.
Risk Assessment
An attacker could exploit this vulnerability to exhaust system resources, potentially leading to unavailability of services or the system.
Recommendation
Update GCC to a version that includes a fix for this issue, or avoid processing untrusted data with the affected component.
Other vulnerabilities in GCC
See all- CVE-2026-102010High
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.
- CVE-1999-1439Low
Gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
Original NVD description (English source)
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS