{"id":"CVE-2026-115455","kind":"vulnerability","aliases":["CVE-2026-115455"],"related":[],"title":"GCC libstdc++: bitset wide-stream extraction overflows stack, crashes application","description":"A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).","summary":"In GCC's libstdc++, extracting data into a bitset from a wide-character stream allocates stack memory without correctly accounting for character size and alignment. Crafted input can cause a stack-based buffer overflow, which an attacker can use to crash the application (denial of service).","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","gcc","libstdc++","runtime"],"not_affected_if":["no-untrusted-input","no-wide-stream-bitset"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-30T08:16:55+00:00","first_seen_at":"2026-10-30T08:29:26+00:00","triaged_at":"2026-10-30T08:30:22+00:00","updated_at":"2026-10-30T08:30:22+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-30T08:30:22Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"GCC libstdc++: bitset wide-stream extraction overflows stack, crashes application","impact":"low","summary":"In GCC's libstdc++, extracting data into a bitset from a wide-character stream allocates stack memory without correctly accounting for character size and alignment. Crafted input can cause a stack-based buffer overflow, which an attacker can use to crash the application (denial of service).","audience":"developers","category":"runtime","nicknames":[],"who_cares":["gcc","libstdc++","c++"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"application crashes via stack overflow, denial of service","analyst_note":"Sources give no affected or fixed GCC versions and no exploit details; check the NVD entry and the GCC bugzilla for version ranges and a patch.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-untrusted-input","no-wide-stream-bitset"],"who_is_affected":"Applications built with GCC's libstdc++ that read bitsets from wide-character streams (std::wistream) using attacker-supplied input are exposed. Programs that never parse untrusted input into a bitset from a wide stream can skip it. The sources do not list affected GCC versions.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000662,"input_tokens":4108,"output_tokens":502,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115455':14A,17A '-2026':13A,16A 'account':42B,98C 'affect':113C 'align':47B,103C 'alloc':37B,94C 'applic':11A,66B,79C,114C 'attack':60B,105C 'base':55B,120C 'bitset':3A,30B,84C 'buffer':56B,121C 'c':18B 'capabl':106C 'caus':51B 'charact':35B,44B,89C,100C 'correct':41B 'could':115C 'craft':48B,109C 'crash':10A,64B 'cve':12A,15A 'data':27B,81C 'denial':67B,124C 'dos':127C 'extract':7A,26B,80C 'fail':95C 'flaw':71C 'found':73C 'gcc':1A,19B,23B,75C 'input':49B,110C 'intern':91C 'lead':123C 'libstdc':2A,20B,25B,76C 'memori':39B,93C 'overflow':8A,57B,122C 'proper':97C 'runtim':21B 'servic':69B,126C 'size':45B,101C 'stack':9A,38B,54B,92C,119C 'stack-bas':53B,118C 'stream':6A,36B,90C 'suppli':108C 'trigger':116C 'use':62B 'wide':5A,34B,88C 'wide-charact':33B,87C 'wide-stream':4A 'without':40B","nicknames":[],"mitigations":[],"who_affected":"Applications built with GCC's libstdc++ that read bitsets from wide-character streams (std::wistream) using attacker-supplied input are exposed. Programs that never parse untrusted input into a bitset from a wide stream can skip it. The sources do not list affected GCC versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T08:16:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115455","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115455","severity":null,"published_at":"2026-10-30T08:16:55+00:00","modified_at":"2026-10-30T08:16:55+00:00","first_seen_at":"2026-10-30T08:29:26+00:00","fetched_at":"2026-10-30T08:29:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}