Threats tagged 'ghc'

A vulnerability in GHC affects subword division operations, causing arithmetic operations to produce incorrect results when compiled with optimizations. This primarily leads to availability and data integrity issues, but in some cases, it may cause more severe security flaws such as buffer overflow conditions. Fixed versions 9.12.2 and 9.12.4 address this issue.

A sign extension error exists in the PPC64le Foreign Function Interface (FFI) of the Glasgow Haskell Compiler (GHC) in certain versions. This flaw can cause numeric arguments in FFI calls to have incorrect runtime values, leading primarily to availability and data integrity issues. Under some conditions, it may also result in more severe security problems such as buffer overflow vulnerabilities. Fixed versions addressing this issue are 9.6.6, 9.8.3, and 9.10.2.

A sign extension error in the AArch64 native code generator (NCG) of GHC can cause arithmetic operations to produce incorrect runtime results. This primarily leads to availability and data integrity issues, but under certain conditions, it may cause more severe security problems such as buffer overflow vulnerabilities. Fixed versions 9.2.5 and 9.4.3 address this issue.