Log in Start free

Vulnerability · Published Sep 22, 2026 · Assigned by redhat

CVE-2026-95619Gcc: libstdc++ integer overflow in `new` operator

High 7.7

In plain English

A high-severity integer overflow in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.4%top 61.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8cpp8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc-c++8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc-gdb-plugin8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc-gfortran8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc-offload-nvptx8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc-plugin-annobin8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8gcc-plugin-devel8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libasan8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libatomic8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libatomic-static8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libgcc8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libgfortran8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libgfortran-static8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libgomp8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libgomp-offload-nvptx8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libitm8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libitm-devel8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8liblsan8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libquadmath8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libquadmath-devel8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libquadmath-static8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libstdc++8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libstdc++-devel8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libstdc++-docs8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libstdc++-static8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libtsan8.5.0-30.el8_10.alma.1ALSA-2026:89830
AlmaLinux:8libubsan8.5.0-30.el8_10.alma.1ALSA-2026:89830
Debian:12gcc-12no fix listedDEBIAN-CVE-2026-95619
Debian:13gcc-12no fix listedDEBIAN-CVE-2026-95619
Debian:14gcc-12no fix listedDEBIAN-CVE-2026-95619
Debian:13gcc-13no fix listedDEBIAN-CVE-2026-95619
Debian:14gcc-1313.5.0-3DEBIAN-CVE-2026-95619
Debian:13gcc-14no fix listedDEBIAN-CVE-2026-95619
Debian:14gcc-1414.4.0-3DEBIAN-CVE-2026-95619
Debian:14gcc-1515.3.0-5DEBIAN-CVE-2026-95619
Debian:14gcc-16no fix listedDEBIAN-CVE-2026-95619
Rocky Linux:8gcc0:8.5.0-30.el8_10RLSA-2026:89830
Ubuntu:22.04:LTSgcc-10no fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-10no fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-10-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-10-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-10-cross-mipsenno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-10-cross-mipsenno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-10-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-10-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-11no fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-11no fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-11no fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-11no fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-11-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-11-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-11-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-11-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-11-cross-mipsenno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-11-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-11-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-11-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-11-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-12no fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-1212.4.0-2ubuntu1~24.04UBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-12-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-12-cross19ubuntu2.2UBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-12-cross-mipsenno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-12-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-12-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-12-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-12-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-13-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-13-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-13-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-3.3no fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-3.3no fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-9no fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-9no fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-9-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-9-crossno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-9-cross-mipsenno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-9-cross-mipsenno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-9-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-9-cross-portsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-arm-none-eabino fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-arm-none-eabino fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-arm-none-eabino fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-arm-none-eabino fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-avrno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-avrno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-avrno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-avrno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-defaultsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-defaultsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-defaultsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-defaultsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-h8300-hmsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-h8300-hmsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-h8300-hmsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-h8300-hmsno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-m68hc1xno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-mingw-w64no fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-mingw-w64no fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-mingw-w64no fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-mingw-w64no fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-msp430no fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-or1k-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-or1k-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-or1k-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-or1k-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-riscv64-unknown-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-riscv64-unknown-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-riscv64-unknown-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-riscv64-unknown-elfno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-snapshotno fix listedUBUNTU-CVE-2026-95619
Ubuntu:24.04:LTSgcc-snapshotno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.04:LTSgcc-snapshotno fix listedUBUNTU-CVE-2026-95619
Ubuntu:26.10gcc-snapshotno fix listedUBUNTU-CVE-2026-95619
Ubuntu:22.04:LTSgcc-xtensa-lx106no fix listedUBUNTU-CVE-2026-95619

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 5 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H

References