CVE-2026-115456: Gcc: out-of-bounds read in std::from_chars
Published Oct 28, 2026
·Updated
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::fromchars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or an application crash.
Other sources
There's a out-of-bounds read in std::fromchars() in libstdc++ when the string being passed as parameter is not NULL terminated. The impact is limited to read invalid float point numbers or reach a non-readable memory position resulting a a Denial-of-Service only.
— Red Hat
Affected Software
157 affected components
ubuntu/gcc-3.3*
ubuntu/gcc-4.7*
ubuntu/gcc-4.8*
ubuntu/gcc-defaults*
ubuntu/gcc-mingw-w64*
ubuntu/gccgo-4.9*
ubuntu/gcc-5*
ubuntu/gcc-5-cross*
ubuntu/gcc-defaults*
ubuntu/gccgo-6*
ubuntu/gcc-3.3*
ubuntu/gcc-4.7*
ubuntu/gcc-4.7-armel-cross*
ubuntu/gcc-4.7-armhf-cross*
ubuntu/gcc-4.8*
ubuntu/gcc-4.8-arm64-cross*
ubuntu/gcc-4.8-armhf-cross*
ubuntu/gcc-4.8-powerpc-cross*
ubuntu/gcc-4.8-ppc64el-cross*
ubuntu/gcc-4.9-cross*
ubuntu/gcc-5-cross-ports*
ubuntu/gcc-arm-linux-androideabi*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-i686-linux-android*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-snapshot*
ubuntu/gcc-7*
ubuntu/gcc-7-cross*
ubuntu/gcc-8*
ubuntu/gcc-8-cross*
ubuntu/gcc-defaults*
ubuntu/gcc-3.3*
ubuntu/gcc-4.8*
ubuntu/gcc-5*
ubuntu/gcc-5-cross*
ubuntu/gcc-5-cross-ports*
ubuntu/gcc-6-cross*
ubuntu/gcc-6-cross-ports*
ubuntu/gcc-7-cross-ports*
ubuntu/gcc-8-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-snapshot*
ubuntu/gcc-10*
ubuntu/gcc-10-cross*
ubuntu/gcc-9*
ubuntu/gcc-9-cross*
ubuntu/gcc-defaults*
ubuntu/gcc-10-cross-mipsen*
ubuntu/gcc-10-cross-ports*
ubuntu/gcc-3.3*
ubuntu/gcc-7*
ubuntu/gcc-8*
ubuntu/gcc-8-cross*
ubuntu/gcc-8-cross-ports*
ubuntu/gcc-9-cross-mipsen*
ubuntu/gcc-9-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-xtensa-lx106*
ubuntu/gcc-10*
ubuntu/gcc-10-cross*
ubuntu/gcc-10-cross-mipsen*
ubuntu/gcc-10-cross-ports*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-3.3*
ubuntu/gcc-9*
ubuntu/gcc-9-cross*
ubuntu/gcc-9-cross-mipsen*
ubuntu/gcc-9-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-m68hc1x*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-msp430*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-xtensa-lx106*
ubuntu/gcc-10*
ubuntu/gcc-10-cross*
ubuntu/gcc-10-cross-mipsen*
ubuntu/gcc-10-cross-ports*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-mipsen*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-mipsen*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-13-cross*
ubuntu/gcc-13-cross-ports*
ubuntu/gcc-3.3*
ubuntu/gcc-9*
ubuntu/gcc-9-cross*
ubuntu/gcc-9-cross-mipsen*
ubuntu/gcc-9-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-13*
ubuntu/gcc-13-cross*
ubuntu/gcc-13-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
ubuntu/gcc-11*
ubuntu/gcc-11-cross*
ubuntu/gcc-11-cross-ports*
ubuntu/gcc-12-cross*
ubuntu/gcc-12-cross-ports*
ubuntu/gcc-13*
ubuntu/gcc-13-cross*
ubuntu/gcc-13-cross-ports*
ubuntu/gcc-arm-none-eabi*
ubuntu/gcc-avr*
ubuntu/gcc-defaults*
ubuntu/gcc-h8300-hms*
ubuntu/gcc-mingw-w64*
ubuntu/gcc-or1k-elf*
ubuntu/gcc-riscv64-unknown-elf*
ubuntu/gcc-snapshot*
Event History
Oct 28, 2026
Data Sourced
via Red Hat·05:40 PM
DescriptionSeverityAffected Software
Oct 30, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·08:21 AM
Data Sourced
via MITRE·08:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness