CVE-2021-46195

Name	CVE-2021-46195
Description	GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
binutils (PTS)	bullseye	2.35.2-2	vulnerable
	bookworm	2.40-2	fixed
	trixie	2.44-3	fixed
	forky, sid	2.45.50.20251209-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
binutils	source	(unstable)	2.37.90.20220207-1	unimportant

Notes

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103841
https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=f10bec5ffa487ad3033ed5f38cfd0fc7d696deab
binutils not covered by security support