Live › vulnerability › CVE-2026-114690
An undersized internal buffer in the libstdc++ parallel search code can be read out of bounds when crafted search data is passed to a program built with parallel mode. A local attacker can crash the process, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 08:29 UTC. All times on this page are UTC.
Only programs compiled against libstdc++ parallel mode that run parallel search on data an attacker can supply locally. The sources do not name affected GCC version ranges. Programs not built with parallel mode are likely unaffected.
No product ranges from the sources yet.
-D_GLIBCXX_PARALLEL or -fopenmp with <parallel/algorithm> use), unknown if the sources give no further detailgcc --versionNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the process to crash and leading to a Denial of Service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-114690")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.