CVE-2017-11671: Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) ve...

Security readout for executives and security teams

This is a compiler bug, not a direct application flaw. Affected GCC versions could generate x86 code that misses failures from RDRAND or RDSEED, potentially reducing randomness quality in software that relies on those CPU instructions for entropy. Exposure is most likely in legacy x86 build environments or binaries compiled with affected GCC versions that use RDRAND or RDSEED intrinsics for randomness-sensitive code. The provided CVE data does not identify specific downstream products or CPEs. Treat this as a targeted legacy-toolchain risk. Prioritize systems that build or maintain cryptographic, authentication, token, or key-generation software using old GCC on x86 platforms. Mitigation focus: Upgrade GCC to fixed vendor-supported versions, including 5.5, 6.4, or later where applicable.; Apply relevant vendor updates, such as Red Hat security advisories, for managed platforms.; Rebuild affected x86 software that uses RDRAND or RDSEED intrinsics after compiler updates..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.