Ghc: Sign extension error
Affects ghcSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 9.4.3, 9.2.5
Data as of 13 Nov 2026, 18:41 UTC
What to do
Upgrade ghc to 9.4.3 or 9.2.5.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| GHCghc | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Apply the official patches by upgrading to GHC versions 9.2.5 or 9.4.3, which contain fixes for this sign extension error. No other mitigation steps are indicated.
Description
A sign extension error in the AArch64 native code generator (NCG) of GHC can cause arithmetic operations to produce incorrect runtime results. This primarily leads to availability and data integrity issues, but under certain conditions, it may cause more severe security problems such as buffer overflow vulnerabilities. Fixed versions 9.2.5 and 9.4.3 address this issue.