5.9
MediumCVSS 3.1 · from redhat
CVE-2026-114691
Gcc: integer wrap in `std
gcc · Integer overflow · CWE-190Affectedgcc, gcc-toolset-15-gcc, gcc-toolset-16-gcc and 24 more
FixNo fix listed yet.
PublishedOct 30, 07:13 · redhat
ScoredOct 30 · 5.9 · redhat
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:08 UTC
What we know
No known exploitation. CISA KEV, checked 22:08 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
It only works under certain conditions, which makes it harder to pull off. CVSS: high attack complexity.
A successful attack can take the service down. CVSS impact.
Description
A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations.
From redhat
Affected and fixed versions
ProductAffectedFixed ingccall versions–gcc-toolset-15-gccall versions–gcc-toolset-16-gccall versions–mingw-gccall versions–compat-gcc-295not stated–compat-gcc-296not stated–compat-gcc-32not stated–compat-gcc-34not stated–gccnot stated–compat-gcc-32not stated–compat-gcc-34not stated–compat-gcc-44not stated–gccnot stated–gccall versions–gcc-toolset-14-gccall versions–gcc-toolset-15-gccall versions–mingw-gccall versions–gccall versions–gcc-toolset-14-gccall versions–gcc-toolset-15-gccall versions–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known