{"id":"CVE-2018-12886","revision":"21460597c77a4de8a262f01ab9b91023","records":[{"revision":"21460597c77a4de8a262f01ab9b91023","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2018-12886","aliases":[],"title":"stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of …","description":"stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.","state":0,"publishedAt":"2019-05-22T18:42:10+00:00","modifiedAt":"2026-10-14T06:30:34.554+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.gnu.org/software/gcc/gcc-8/changes.html","https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379&view=markup"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2018-12886","license":"CVE Program Terms of Use","key":"cve-program:CVE-2018-12886","identifiers":["CVE-2018-12886"]},"retained":false,"historicalAffected":[]}],"coverage":[]}