VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 26, 2022· Updated Aug 3, 2024

CVE-2022-27943

CVE-2022-27943

Description

GNU GCC 11.2 libiberty's rust-demangle.c has a stack consumption vulnerability in demangle_const, exploitable via crafted input leading to denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

GNU GCC 11.2 libiberty's rust-demangle.c has a stack consumption vulnerability in demangle_const, exploitable via crafted input leading to denial of service.

Vulnerability

In GNU GCC 11.2, the file libiberty/rust-demangle.c contains a stack consumption vulnerability in the demangle_const function. This can be triggered by processing a crafted input, as demonstrated by the nm-new utility.

Exploitation

An attacker can exploit this vulnerability by providing a specially crafted binary or symbol name that causes demangle_const to consume excessive stack space. The nm-new tool, which uses libiberty's demangling routines, is a known vector. No authentication is required if the attacker can supply the input to the tool.

Impact

Successful exploitation leads to stack exhaustion, resulting in a denial of service (DoS) condition. The tool may crash or become unresponsive.

Mitigation

No patch or fixed version has been disclosed in the available references. Users should monitor GNU GCC updates for a fix. As a workaround, avoid processing untrusted input with tools that rely on the vulnerable demangling code.

AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

79

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

3

News mentions

0

No linked articles in our index yet.