Summary
CompCert 3.0 through 3.17 could use stale upper register bits as part of a jump-table index, causing a fault or an unintended jump. Fixed in CompCert 3.18. The public reproducer does not establish remote exploitation or reliable control of the destination; no severity or CVSS score is assigned upstream.
Technical analysis
The accompanying research article explains the finding, reproduction, and remediation status.
Read the technical write-upDisclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified