CVE-2021-3826

MEDIUM 6.5CVE-2021-3826 · Published 01/09/2022 · updated 02/11/2026

In short

CVE-2021-3826 is a MEDIUM (CVSS 6.5) vulnerability affecting gcc (gnu).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gcc gnu	`= 11.2`	No fix yet

Description

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

References

gcc.gnu.org/git · Broken Link
gcc.gnu.org/pipermail/gcc-patches/2021-September/579987 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG · Mailing List

More vulnerabilities in gcc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free