CVE-2026-115455

    Dashboard / Vulnerabilities / CVE-2026-115455

    CVE-2026-115455

    Published: 30 Oct 2026Last Modified: 10 Nov 2026

    Summary: Gcc: stack overflow in std::bitset on libstdc++

    Details: A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).

    References: https://access.redhat.com/downloads/content/package-browser/, https://catalog.redhat.com/software/containers/, https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219, https://access.redhat.com/errata/RHSA-2026:94989, https://access.redhat.com/security/cve/CVE-2026-115455, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-115455.json, https://nvd.nist.gov/vuln/detail/CVE-2026-115455, https://bugzilla.redhat.com/show_bug.cgi?id=2562933

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -5d419c69ce2e6b86d7da75f18736904885674219

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-115455 | CVE-DB