{"id":"HSEC-2024-0007","summary":"Sign extension error in the AArch64 NCG","details":"# Sign extension error in the AArch64 NCG\n\nArithmetic operations may result in incorrect runtime results on the native aarch64 backend.\nFor the most part, this bug only causes availability and data integrity issues.\nHowever, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.\n","modified":"2025-11-14T18:15:43.302095Z","published":"2025-11-14T14:45:34Z","database_specific":{"home":"https://github.com/haskell/security-advisories","osvs":"https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export","repository":"https://github.com/haskell/security-advisories"},"references":[{"type":"REPORT","url":"https://gitlab.haskell.org/ghc/ghc/-/issues/22282"},{"type":"FIX","url":"https://gitlab.haskell.org/ghc/ghc/-/merge_requests/9152"},{"type":"FIX","url":"https://gitlab.haskell.org/ghc/ghc/-/merge_requests/9139"}],"affected":[{"package":{"name":"ghc","ecosystem":"GHC"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.2.4"},{"fixed":"9.2.5"},{"introduced":"9.4.2"},{"fixed":"9.4.3"}]}],"versions":["9.2.4","9.4.2"],"database_specific":{"human_link":"https://github.com/haskell/security-advisories/tree/main/advisories/published/2024/HSEC-2024-0007.md","osv":"https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export/2024/HSEC-2024-0007.json","source":"https://github.com/haskell/security-advisories/blob/generated/osv-export/2024/HSEC-2024-0007.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H"}]}],"schema_version":"1.7.5"}