Gcc: libstdc++ integer overflow in `new` operator
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.8 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Hardened Images | affected |
|
||||||
| Red Hat | Red Hat Hardened Images | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 10 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift Container Platform 4 | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift Container Platform 4 | affected | — | ||||||
| Red Hat | Red Hat OpenShift Container Platform 5 | affected | — |
No data.
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Hardened Images | |||
| gcc-main-16.2.1-2.hum1 | cpe:/a:redhat:hummingbird:1 | RHSA-2026:58503 | 2026-08-22T00:00:00Z |
| gcc13-main-13.5.0-0.1.hum1 | cpe:/a:redhat:hummingbird:1 | RHSA-2026:67275 | 2026-09-14T00:00:00Z |
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Redhat | Enterprise Linux |
|
||||||||
| Redhat | Hardened Images |
|
||||||||
| Redhat | Hardened Images |
|
||||||||
| Redhat | Openshift Container Platform |
|
Vendor Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.482% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Eus
|
|
| CPEs | cpe:/a:redhat:rhel_eus:9.8::appstream cpe:/a:redhat:rhel_eus:9.8::crb cpe:/o:redhat:rhel_eus:9.8::baseos |
|
| Vendors & Products |
Redhat rhel Eus
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift Ai
|
|
| CPEs | cpe:/a:redhat:openshift_ai | |
| Vendors & Products |
Redhat openshift Ai
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
cpe:/a:redhat:enterprise_linux:10 cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift:5 |
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat hardened Images
Redhat openshift Container Platform |
|
| Vendors & Products |
Redhat hardened Images
Redhat openshift Container Platform |
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` operator. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability. | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability. |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat enterprise Linux
Redhat openshift |
|
| CPEs | cpe:/a:redhat:openshift:4 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat enterprise Linux
Redhat openshift |
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Gcc: libstd++: libstdc++ integer overflow in `new` operator | Gcc: libstdc++ integer overflow in `new` operator |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` operator. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability. | |
| Title | Gcc: libstd++: libstdc++ integer overflow in `new` operator | |
| First Time appeared |
Redhat
Redhat hummingbird |
|
| Weaknesses | CWE-190 | |
| CPEs | cpe:/a:redhat:hummingbird:1 | |
| Vendors & Products |
Redhat
Redhat hummingbird |
|
| References |
| |
| Metrics |
cvssV3_1
|