6.2
MediumCVSS 3.1 · from redhat
CVE-2026-114690
Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
gcc · Out-of-bounds write · CWE-787Affectedgcc, gcc-toolset-15-gcc, gcc-toolset-16-gcc and 24 more
FixNo fix listed yet.
PublishedOct 30, 07:13 · redhat
ScoredOct 30 · 6.2 · redhat
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:09 UTC
What we know
No known exploitation. CISA KEV, checked 22:09 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
A successful attack can take the service down. CVSS impact.
Description
A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the process to crash and leading to a Denial of Service (DoS).
From redhat
Affected and fixed versions
ProductAffectedFixed ingccall versions–gcc-toolset-15-gccall versions–gcc-toolset-16-gccall versions–mingw-gccall versions–compat-gcc-295not stated–compat-gcc-296not stated–compat-gcc-32not stated–compat-gcc-34not stated–gccnot stated–compat-gcc-32not stated–compat-gcc-34not stated–compat-gcc-44not stated–gccnot stated–gccall versions–gcc-toolset-14-gccall versions–gcc-toolset-15-gccall versions–mingw-gccall versions–gccall versions–gcc-toolset-14-gccall versions–gcc-toolset-15-gccall versions–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known