{"id":"HSEC-2024-0008","summary":"Sign extension error in the PPC64le FFI","details":"# Sign extension error in the PPC64le FFI\n\nNumeric arguments of FFI call on the PPC64le backend may result in incorrect runtime values.\nFor the most part, this bug only causes availability and data integrity issues.\nHowever, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.\n","modified":"2026-06-02T14:00:04.896329529Z","published":"2025-11-14T14:45:34Z","database_specific":{"osvs":"https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export","repository":"https://github.com/haskell/security-advisories","home":"https://github.com/haskell/security-advisories"},"references":[{"type":"REPORT","url":"https://gitlab.haskell.org/ghc/ghc/-/issues/23034"},{"type":"FIX","url":"https://gitlab.haskell.org/ghc/ghc/-/merge_requests/12885"}],"affected":[{"package":{"name":"ghc","ecosystem":"GHC"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.2.1"},{"fixed":"9.6.6"},{"introduced":"9.8.1"},{"fixed":"9.8.3"},{"introduced":"9.10.1"},{"fixed":"9.10.2"}]}],"versions":["9.2.1","9.2.2","9.2.3","9.2.4","9.2.5","9.2.6","9.2.7","9.2.8","9.4.1","9.4.1-alpha1","9.4.1-alpha2","9.4.1-alpha3","9.4.1-rc1","9.4.2","9.4.3","9.4.4","9.4.5","9.6.1","9.6.1-alpha2","9.6.1-alpha3","9.6.1-rc1","9.6.2"],"database_specific":{"source":"https://github.com/haskell/security-advisories/blob/generated/osv-export/2024/HSEC-2024-0008.json","human_link":"https://github.com/haskell/security-advisories/tree/main/advisories/published/2024/HSEC-2024-0008.md","osv":"https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export/2024/HSEC-2024-0008.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H"}]}],"schema_version":"1.7.5"}