Findings

CVE-2021-3826

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and c…

Published Sep 1, 2022 · updated Oct 14, 2026 · gnu gcc

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 1, 2022 · NIST NVD

    Detected

    Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

Affected

  • cpe fedoraproject/fedora35
  • cpe fedoraproject/fedora36
  • cpe fedoraproject/fedora37
  • cpe gnu/gcc11.2

Sources

  • CVE.orgVulnerability recordCVE-2021-3826

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-3826

    30-day exploitation probability 1.4%

    first.org
  • NIST NVDVulnerability recordCVE-2021-3826

    Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

    nvd.nist.gov

References