Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

TinyCC can corrupt memory when compiling malicious code

CVE-2018-20376 · published 7 years ago
Summary

The Tiny C Compiler version 0.9.27 may write data outside its allocated memory when it processes a specially crafted source file. This can cause the program to crash or be taken over by an attacker. Upgrade to a newer version of TinyCC or apply the vendor's patch to avoid the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
tinycc tinycc 0.9.27
cpe:2.3:a:tinycc:tinycc:0.9.27:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_directive function in tccasm.c.
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_directive function in tccasm.c.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published23 Dec 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-20376 · NVD
Track software like this
Free during beta