Ghc: Sign extension error
Affects ghcSource GCVE Database
Fixed in 9.10.2 : patch ghc soon.
Data as of 13 Nov 2026, 18:41 UTC
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 9.10.2, 9.8.3, 9.6.6
What to do
Upgrade ghc to 9.10.2, 9.8.3 or 9.6.6.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| GHCghc | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to GHC versions 9.6.6, 9.8.3, or 9.10.2 or later where this issue is fixed. The patch is available and should be applied to affected versions to prevent potential exploitation. No additional mitigation steps are indicated by the vendor advisory.
Description
A sign extension error exists in the PPC64le Foreign Function Interface (FFI) of the Glasgow Haskell Compiler (GHC) in certain versions. This flaw can cause numeric arguments in FFI calls to have incorrect runtime values, leading primarily to availability and data integrity issues. Under some conditions, it may also result in more severe security problems such as buffer overflow vulnerabilities. Fixed versions addressing this issue are 9.6.6, 9.8.3, and 9.10.2.