Live › vulnerability › CVE-2026-115455
In GCC's libstdc++, extracting data into a bitset from a wide-character stream allocates stack memory without correctly accounting for character size and alignment. Crafted input can cause a stack-based buffer overflow, which an attacker can use to crash the application (denial of service).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 08:29 UTC. All times on this page are UTC.
Applications built with GCC's libstdc++ that read bitsets from wide-character streams (std::wistream) using attacker-supplied input are exposed. Programs that never parse untrusted input into a bitset from a wide stream can skip it. The sources do not list affected GCC versions.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-115455")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.