CLEANSTART-2026-TN20078
Dashboard / Vulnerabilities / CLEANSTART-2026-TN20078
Summary: **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables i...
Details: Security vulnerability affects the gcc package. **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected.
References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TN20078.json, https://osv.dev/vulnerability/CVE-2023-4039, https://nvd.nist.gov/vuln/detail/CVE-2023-4039
Affected packages
Package
Name: gcc
Purl: pkg:apk/cleanstart/gcc
Affected ranges
Type: ECOSYSTEM
Events:
