Gcc: stack overflow in std::bitset on libstdc++
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The GNU Compiler Collection (GCC) C++ standard library, libstdc++, is affected, particularly applications that read data into a std::bitset from wide-character streams. An attacker who can supply specially crafted input to such an application could cause a stack buffer overflow, potentially crashing it and causing a denial of service.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).
Timeline
- CVE published
- First seen by cve.now
Affected versions
- gcc
Version range not reported
- gcc-toolset-15-gcc
Version range not reported
- gcc-toolset-16-gcc
Version range not reported
- mingw-gcc
Version range not reported
- compat-gcc-295
Version range not reported
- compat-gcc-296
Version range not reported
- compat-gcc-32
Version range not reported
- compat-gcc-34
Version range not reported
- gcc
Version range not reported
- compat-gcc-32
Version range not reported
- compat-gcc-34
Version range not reported
- compat-gcc-44
Version range not reported
- gcc
Version range not reported
- gcc
Version range not reported
- gcc-toolset-14-gcc
Version range not reported
- gcc-toolset-15-gcc
Version range not reported
- mingw-gcc
Version range not reported
- gcc
Version range not reported
- gcc-toolset-14-gcc
Version range not reported
- gcc-toolset-15-gcc
Version range not reported
- gcc-toolset-16-gcc
Version range not reported
- mingw-gcc
Version range not reported
- gcc
Version range not reported
- gcc13
Version range not reported
- openshift/ose-rhel-coreos-8
Version range not reported
- openshift/ose-rhel-coreos-9
Version range not reported
- openshift/ose-rhel-coreos-9
Version range not reported