HSEC-2025-0001

Subword division operations may produce incorrect results

Arithmetic operations may produce incorrect results when compiled with optimizations. For the most part, this bug only causes availability and data integrity issues. However, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.

Info

Published
March 18, 2025
Modified
March 18, 2025
CAPECs
< none >
CWEs
682
Keywords
integrity, dos
Aliases
< none >
Related
< none >
References
[REPORT] https://gitlab.haskell.org/ghc/ghc/-/issues/25653
[REPORT] https://discourse.haskell.org/t/psa-correctness-issue-in-ghc-9-12/11204
[FIX] https://gitlab.haskell.org/ghc/ghc/-/merge_requests/13820

Affected

ghc
CVSS
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Versions
>=9.12.1 && <9.12.2
Declarations
< none >