CVE-2026-115455: Gcc: stack overflow in std::bitset on libstdc++
Published Oct 28, 2026
·Updated
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).
Other sources
There's a Stack corruption in std::bitset stream extraction in libstdc++. The builtinalloca argument didn't account for the size or alignment of wide characters resulting in a stack buffer overflow.
— Red Hat
Affected Software
157 affected components
ubuntu/gcc-3.3*
ubuntu/gcc-4.7*
ubuntu/gcc-4.8*
ubuntu/gcc-defaults*
ubuntu/gcc-mingw-w64*
ubuntu/gccgo-4.9*
ubuntu/gcc-5*
ubuntu/gcc-5-cross*
ubuntu/gcc-defaults*
ubuntu/gccgo-6*
ubuntu/gcc-3.3*
ubuntu/gcc-4.7*
ubuntu/gcc-4.7-armel-cross*
ubuntu/gcc-4.7-armhf-cross*
ubuntu/gcc-4.8*
ubuntu/gcc-4.8-arm64-cross*
ubuntu/gcc-4.8-armhf-cross*
ubuntu/gcc-4.8-powerpc-cross*
ubuntu/gcc-4.8-ppc64el-cross*
ubuntu/gcc-4.9-cross*
ubuntu/gcc-5-cross-ports*
ubuntu/gcc-arm-linux-androideabi*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-i686-linux-android*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-snapshot*
ubuntu/gcc-7*
ubuntu/gcc-7-cross*
ubuntu/gcc-8*
ubuntu/gcc-8-cross*
ubuntu/gcc-defaults*
ubuntu/gcc-3.3*
ubuntu/gcc-4.8*
ubuntu/gcc-5*
ubuntu/gcc-5-cross*
ubuntu/gcc-5-cross-ports*
ubuntu/gcc-6-cross*
ubuntu/gcc-6-cross-ports*
ubuntu/gcc-7-cross-ports*
ubuntu/gcc-8-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-snapshot*
ubuntu/gcc-10*
ubuntu/gcc-10-cross*
ubuntu/gcc-9*
ubuntu/gcc-9-cross*
ubuntu/gcc-defaults*
ubuntu/gcc-10-cross-mipsen*
ubuntu/gcc-10-cross-ports*
ubuntu/gcc-3.3*
ubuntu/gcc-7*
ubuntu/gcc-8*
ubuntu/gcc-8-cross*
ubuntu/gcc-8-cross-ports*
ubuntu/gcc-9-cross-mipsen*
ubuntu/gcc-9-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-xtensa-lx106*
ubuntu/gcc-10*
ubuntu/gcc-10-cross*
ubuntu/gcc-10-cross-mipsen*
ubuntu/gcc-10-cross-ports*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-3.3*
ubuntu/gcc-9*
ubuntu/gcc-9-cross*
ubuntu/gcc-9-cross-mipsen*
ubuntu/gcc-9-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-xtensa-lx106*
ubuntu/gcc-10*
ubuntu/gcc-10-cross*
ubuntu/gcc-10-cross-mipsen*
ubuntu/gcc-10-cross-ports*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-mipsen*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-mipsen*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-13-cross*
ubuntu/gcc-13-cross-ports*
ubuntu/gcc-3.3*
ubuntu/gcc-9*
ubuntu/gcc-9-cross*
ubuntu/gcc-9-cross-mipsen*
ubuntu/gcc-9-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-13*
ubuntu/gcc-13-cross*
ubuntu/gcc-13-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-13*
ubuntu/gcc-13-cross*
ubuntu/gcc-13-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
Event History
Oct 28, 2026
Data Sourced
via Red Hat·03:47 PM
DescriptionSeverityAffected Software
Oct 30, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·07:13 AM
Data Sourced
via MITRE·07:13 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·07:13 AM
Weakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness