CVE-2018-9996

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.

• CWE-674

• http://www.securityfocus.com/bid/103733Third Party Advisory, VDB Entry
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85304Exploit, Issue Tracking, Third Party Advisory
• http://www.securityfocus.com/bid/103733Third Party Advisory, VDB Entry
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85304Exploit, Issue Tracking, Third Party Advisory

Published

Apr 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9990In Zulip Server versions before 1.7.2, there was an XSS issu…
• CVE-2018-9991Frog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Use…
• CVE-2018-9992Frog CMS 0.9.5 has XSS via the name field of a new "File" or…
• CVE-2018-9993YUNUCMS 1.0.7 has XSS via the content title on an admin/cont…
• CVE-2018-9994Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-9995TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QS…
• CVE-2018-9997Cross-site scripting (XSS) vulnerability in mail compose in …
• CVE-2018-9998Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7…
• CVE-2018-9999In Zulip Server versions before 1.7.2, there was an XSS issu…