{"id":"CVE-2026-114690","kind":"vulnerability","aliases":["CVE-2026-114690"],"related":[],"title":"GCC libstdc++: parallel search buffer overflow lets local crash a program","description":"A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the process to crash and leading to a Denial of Service (DoS).","summary":"An undersized internal buffer in the libstdc++ parallel search code can be read out of bounds when crafted search data is passed to a program built with parallel mode. A local attacker can crash the process, causing a denial of service.","severity":"medium","cvss":6.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","gcc","libstdc++","runtime"],"not_affected_if":["default-config","no-parallel-mode"],"how_to_check":"- Check whether programs are compiled with GCC parallel mode (`-D_GLIBCXX_PARALLEL` or `-fopenmp` with `<parallel/algorithm>` use), unknown if the sources give no further detail\n- Check the compiler version with `gcc --version`","fix":null,"status":"open","published_at":"2026-10-30T08:16:55+00:00","first_seen_at":"2026-10-30T08:29:26+00:00","triaged_at":"2026-10-30T08:30:15+00:00","updated_at":"2026-10-30T08:30:15+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-30T08:30:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"GCC libstdc++: parallel search buffer overflow lets local crash a program","impact":"low","summary":"An undersized internal buffer in the libstdc++ parallel search code can be read out of bounds when crafted search data is passed to a program built with parallel mode. A local attacker can crash the process, causing a denial of service.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["gcc","libstdc++","c++"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local process crashes, denial of service only","analyst_note":"","how_to_check":"- Check whether programs are compiled with GCC parallel mode (`-D_GLIBCXX_PARALLEL` or `-fopenmp` with `<parallel/algorithm>` use), unknown if the sources give no further detail\n- Check the compiler version with `gcc --version`","plain_action":"","needs_analyst":false,"not_affected_if":["default-config","no-parallel-mode"],"who_is_affected":"Only programs compiled against libstdc++ parallel mode that run parallel search on data an attacker can supply locally. The sources do not name affected GCC version ranges. Programs not built with parallel mode are likely unaffected.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000655,"input_tokens":4111,"output_tokens":487,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114690':14A,17A '-2026':13A,16A 'access':75C 'applic':104C 'attack':53B,92C 'bound':37B,73C 'buffer':5A,25B,89C 'built':47B 'c':18B 'caus':58B,109C 'code':31B 'compil':105C 'craft':39B,99C 'crash':9A,55B,113C 'cve':12A,15A 'data':41B,101C 'denial':60B,118C 'dos':121C 'due':84C 'exist':77C 'exploit':94C 'flaw':64C,96C 'found':66C 'gcc':1A,19B,68C 'implement':83C 'intern':24B,88C 'lead':115C 'let':7A 'libstdc':2A,20B,28B,80C 'local':8A,52B,91C 'memori':74C 'mode':50B,108C 'out-of-bound':70C 'overflow':6A 'parallel':3A,29B,49B,81C,107C 'pass':43B 'process':57B,111C 'program':11A,46B 'provid':98C 'read':34B 'runtim':21B 'search':4A,30B,40B,82C,100C 'servic':62B,120C 'unders':23B,87C 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":"Only programs compiled against libstdc++ parallel mode that run parallel search on data an attacker can supply locally. The sources do not name affected GCC version ranges. Programs not built with parallel mode are likely unaffected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T08:16:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114690","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114690","severity":null,"published_at":"2026-10-30T08:16:55+00:00","modified_at":"2026-10-30T08:16:55+00:00","first_seen_at":"2026-10-30T08:29:26+00:00","fetched_at":"2026-10-30T08:29:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}