CVE-2006-0635: Fabrice Bellard Tiny C Compiler

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.

Affected products

• Fabrice Bellard Tiny C Compiler: version 0.9.23 only

Published 2006-02-10. Last modified 2026-06-16.