CVE-2026-115456
Gcc: out-of-bounds read in std::from_chars
CVSS 3.1 3.7 LOWCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-115456
PublishedA flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or an application crash.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-115456 · CVE overview and exploitation status
cve-program · CVE-2026-115456
- https://access.redhat.com/errata/RHSA-2026:98524
- https://access.redhat.com/errata/RHSA-2026:98526
- https://access.redhat.com/errata/RHSA-2026:98534
- https://access.redhat.com/errata/RHSA-2026:98633
- https://access.redhat.com/errata/RHSA-2026:98640
- https://access.redhat.com/errata/RHSA-2026:98648
- https://access.redhat.com/security/cve/CVE-2026-115456
- https://bugzilla.redhat.com/show_bug.cgi?id=2563044
Related changes
Linked by CVE identifier- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 11 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 11 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 11 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 11 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 11 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 9 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 6 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Affected-version evidence changed · 3 Nov 2026
- Gcc: out-of-bounds read in std::from_chars · Newly collected advisory · 30 Oct 2026