CVE-2019-9754: Tinycc

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 1 byte out of bounds write in the end_macro function in tccpp.c.

Affected products

• Tinycc Tinycc: version 0.9.27 only

Published 2019-03-13. Last modified 2026-06-17.