HSEC-2024-0008
Sign extension error in the PPC64le FFI
Sign extension error in the PPC64le FFI
Numeric arguments of FFI call on the PPC64le backend may result in incorrect runtime values. For the most part, this bug only causes availability and data integrity issues. However, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.
What each source reports
OSV No score
Sign extension error in the PPC64le FFI
Sign extension error in the PPC64le FFI
Numeric arguments of FFI call on the PPC64le backend may result in incorrect runtime values. For the most part, this bug only causes availability and data integrity issues. However, in some circumstances, it may result in other, more complicated security related flaws, such as buffer overflow conditions.
- Record
HSEC-2024-0008- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghcGHC |
9.2.1 up to 9.6.6, 9.8.1 up to 9.8.3, 9.10.1 up to 9.10.2, plus listed versions 9.2.29.2.39.2.49.2.59.2.6 Show 16 moreShow less9.2.79.2.89.4.19.4.1-alpha19.4.1-alpha29.4.1-alpha39.4.1-rc19.4.29.4.39.4.49.4.59.6.19.6.1-alpha29.6.1-alpha39.6.1-rc19.6.2 |
9.6.69.8.39.10.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
HSEC-2024-0008 is a vulnerability with no CVSS score yet in ghc, published November 14, 2025. No source lists public exploit code. Fixed in ghc 9.6.6.