{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"mingw-w64","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NDEZ0CCF0XVSRHH4073KG8","modified_at":"2026-10-23T18:03:22.167578243Z","published_at":"2018-08-14T16:29:01.867Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-5392","https://security-tracker.debian.org/tracker/CVE-2018-5392"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-5392","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-5392"}],"summary":"mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to fun"}