Logo
›
›component›gmp
Name
gmp
Version
6.2.1
Type
library
Description
GNU multiprecision arithmetic library
Licenses
GPL-2.0-or-later | LGPL-3.0-or-later
PURL
-
CPE
cpe:2.3:*:gmplib:gmp:6.2.1:*:*:*:*:*:*:*

Other Versions#

Project
Branch
Version
yocto
master
6.3.0
yocto
scarthgap
6.3.0

Patches#

#
Title
Author
Resolve
1
confiure.ac: Believe the cflags from environment
Khem Raj <raj.khem@gmail.com>
2
Append the user provided flags to the auto-detected ones.
Alexander Kanavin <alex.kanavin@gmail.com>
3
Patch #3
Khem Raj <raj.khem@gmail.com>
4
Patch #4
Ross Burton <ross.burton@arm.com>
CVE-2021-43618

Vulnerabilities#

Name
Analysis
Description
CVE-2021-43618
Patched
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.