CVE-2018-5392
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
CVE-2018-5392- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-824
- Updated
- 2026-11-02
CVE List No score
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
CVE-2018-5392- Weakness
- CWE-824
- Updated
- 2026-11-02
EUVDEUVD-2018-17162 No score
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
EUVD-2018-17162- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x4v8-qgp4-6739
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not...
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
GHSA-x4v8-qgp4-6739- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSV
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
CVE-2018-5392- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-5392
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
DEBIAN-CVE-2018-5392- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-5392
mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
- Record
UBUNTU-CVE-2018-5392- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mingw-w64Debian:12 |
All versions, plus listed versions 10.0.0-311.0.0-111.0.1-111.0.1-211.0.1-3 Show 15 moreShow less11.0.1-412.0.0-112.0.0-212.0.0-312.0.0-412.0.0-4~exp112.0.0-4~exp212.0.0-4~exp312.0.0-4~exp412.0.0-513.0.0-113.0.0-1+bootstrap113.0.0-1+bootstrap213.0.0-214.0.0-1 |
None known |
mingw-w64Debian:13 |
All versions, plus listed versions 12.0.0-513.0.0-113.0.0-1+bootstrap113.0.0-1+bootstrap213.0.0-214.0.0-1 |
None known |
mingw-w64Debian:14 |
All versions, plus listed versions 12.0.0-513.0.0-113.0.0-1+bootstrap113.0.0-1+bootstrap213.0.0-214.0.0-1 |
None known |
mingw-w64Ubuntu:14.04:LTS |
All versions, plus listed versions 3.0~svn5915-13.0.0-33.1.0-1 |
None known |
mingw-w64Ubuntu:16.04:LTS |
All versions, plus listed versions 4.0.2-44.0.4-14.0.4-2 |
None known |
mingw-w64Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.2-25.0.3-1 |
None known |
mingw-w64Ubuntu:20.04:LTS |
All versions, plus listed versions 6.0.0-36.0.0-47.0.0-2 |
None known |
mingw-w64Ubuntu:22.04:LTS |
All versions, plus listed versions 8.0.0-1 |
None known |
mingw-w64Ubuntu:24.04:LTS |
All versions, plus listed versions 11.0.1-211.0.1-311.0.1-3build1 |
None known |
mingw-w64Ubuntu:25.10 |
All versions, plus listed versions 12.0.0-3 |
None known |
mingw-w64Ubuntu:26.10 |
All versions, plus listed versions 13.0.0-2ubuntu1 |
None known |
mingw-w64Ubuntu:26.04:LTS |
All versions, plus listed versions 12.0.0-313.0.0-1+bootstrap213.0.0-2ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-5392 is a high vulnerability (CVSS 7.5) in Mingw Mingw-w64, published August 14, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/307144
nvd.nist.gov/vuln/detail/CVE-2018-5392
github.com/advisories/GHSA-x4v8-qgp4-6739
security-tracker.debian.org/tracker/CVE-2018-5392
ubuntu.com/security/CVE-2018-5392
sourceforge.net/p/mingw-w64/mailman/message/31034877
sourceware.org/bugzilla/show_bug.cgi?id=17321
cve.org/CVERecord?id=CVE-2018-5392