8.1

CVE-2018-12886: gnu gcc

CVSS: 8.1v3.0HighModified
AliasesUBUNTU-CVE-2018-12886CGA-6qpw-wxg7-gw36CGA-vhfc-6fjj-wr39
Published 22-05-2019Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2018-12886 is a high (CVSS 8.1) vulnerability in gnu gcc. EPSS estimates a 2.74% chance of exploitation in the next 30 days, higher than 85.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
43/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.1/10
010
High · v3.0 (NVD)
EPSS score
2.74%
0%100%
Low · +0.57 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 0 · Related 2
CGA-CWFF-7599-RG47CGA-F6V5-6CG3-6M8H

Timeline

  1. 22-05-2019
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

2.74%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

+0.57 pp

From 2.17% on 18-09-2026

18-09-202618-10-2026
EPSS score
2.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (gnu.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Ubuntu7 products
  • gcc-4.8All versions (No fix recorded)
  • gcc-4.9All versions (No fix recorded)
  • gcc-6All versions (No fix recorded)
  • gcc-7All versions (No fix recorded)
  • gcc-8All versions (No fix recorded)
Chainguard1 product
  • gcc-6< 6.5.0-r5
Gnu1 product
  • gcc≥ 4.1, ≤ 8.0
Wolfi1 product
  • gcc-6< 6.5.0-r5

4 vendors · 10 products

References

7 links