CVE-2018-12641

An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.

• CWE-400

• https://access.redhat.com/errata/RHSA-2019:2075
• https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763099Third Party Advisory
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85452Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201908-01
• https://sourceware.org/bugzilla/show_bug.cgi?id=23058Exploit, Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4326-1/
• https://usn.ubuntu.com/4336-1/
• https://access.redhat.com/errata/RHSA-2019:2075
• https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763099Third Party Advisory
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85452Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201908-01
• https://sourceware.org/bugzilla/show_bug.cgi?id=23058Exploit, Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4326-1/
• https://usn.ubuntu.com/4336-1/

Published

Jun 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12634CirCarLife Scada before 4.3 allows remote attackers to obtai…9.8
• CVE-2018-12635CirCarLife Scada v4.2.4 allows unauthorized upgrades via req…
• CVE-2018-12636The iThemes Security (better-wp-security) plugin before 7.0.…
• CVE-2018-12638An issue was discovered in the Bose Soundtouch app 18.1.4 fo…
• CVE-2018-1264Cloud Foundry Log Cache, versions prior to 1.1.1, logs its U…9.1
• CVE-2018-12640The webService binary on Insteon HD IP Camera White 2864-222…9.8
• CVE-2018-12642Froxlor through 0.9.39.5 has Incorrect Access Control for ti…
• CVE-2018-12648The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/…
• CVE-2018-12649An issue was discovered in app/Controller/UsersController.ph…
• CVE-2018-1265Cloud Foundry Diego, release versions prior to 2.8.0, does n…
• CVE-2018-12650Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site…
• CVE-2018-12651A Reflected Cross Site Scripting (XSS) Vulnerability was dis…