HSEC-2024-0006
fromIntegral: conversion error
fromIntegral: conversion error
fromIntegral may result in coercion errors when used with optimization flags -O1 or -O2
in the following situation:
- Converting negative
InttoNaturaldoes not throw an arithmetic underflow error - Converting large
Integergreater than 2^64 toNaturaloverflow.
For the most part, these errors in and of themselves result only in availability and data integrity issues. However, in some circumstances, they may result in other, more complicated security related flaws, such as buffer overflow conditions.
What each source reports
OSV No score
fromIntegral: conversion error
fromIntegral: conversion error
fromIntegral may result in coercion errors when used with optimization flags -O1 or -O2
in the following situation:
- Converting negative
InttoNaturaldoes not throw an arithmetic underflow error - Converting large
Integergreater than 2^64 toNaturaloverflow.
For the most part, these errors in and of themselves result only in availability and data integrity issues. However, in some circumstances, they may result in other, more complicated security related flaws, such as buffer overflow conditions.
- Record
HSEC-2024-0006- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
baseHackage |
4.15.0.0 up to 4.15.1.0 | 4.15.1.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
HSEC-2024-0006 is a vulnerability with no CVSS score yet in base, published November 14, 2025. No source lists public exploit code. Fixed in base 4.15.1.0.