PT-2025-11651 · Ghc · Ghc

Publicado 2025-03-18 · Atualizado 2025-11-14

OSV

Subword division operations may produce incorrect results

Arithmetic operations may produce incorrect results when compiled with optimizations. For the most part, this bug only causes availability and data integrity issues. However, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.

Identificadores relacionados

HSEC-2025-0001

Produtos afetados

Ghc

Referências · 10

• https://github.com/haskell/security-advisories · Nota
• https://gitlab.haskell.org/ghc/ghc/-/issues/26711 · Nota
• https://discourse.haskell.org/t/critical-code-generation-bug-with-ghc-9-12-3/13505/2 · Nota
• https://gitlab.haskell.org/ghc/ghc/-/merge_requests/13820 · Nota
• https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export · Nota
• https://gitlab.haskell.org/ghc/ghc/-/issues/25653 · Nota
• https://haskell.github.io/security-advisories · Nota
• https://osv.dev/vulnerability/HSEC-2025-0001 · Aviso do Fabricante
• https://discourse.haskell.org/t/psa-correctness-issue-in-ghc-9-12/11204 · Nota
• https://gitlab.haskell.org/ghc/ghc/-/issues/26668 · Nota