Gcc: out-of-bounds read in std::from_chars

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or an application crash.

Etkilenen sürümler8 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-115456 Diğer

Kayıt geçmişi

1. 30 Eki 2026 11:21Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++
• 5,9 CVE-2026-114691Gcc: integer wrap in `std
• 6,2 CVE-2026-114690Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
• 5,9 CVE-2026-118593Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)
• 7,5 CVE-2026-103963Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service
• 3,6 CVE-2026-118475Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk