CVE-2018-20376: Tinycc

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_directive function in tccasm.c.

Affected products

• Tinycc Tinycc: version 0.9.27 only

Published 2018-12-23. Last modified 2026-06-17.