GCC libstdc++ out-of-bounds memory access in parallel search (EUVD-2026-113745)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- GCC
- Product
- libstdc++
- First seen
Summary
The ENISA EU Vulnerability Database (EUVD) published entry EUVD-2026-113745, which describes an out-of-bounds memory access in the libstdc++ parallel search implementation caused by an undersized internal buffer. The entry gives a CVSS v3.1 score of 6.2 and says a local attacker could exploit it with crafted search data in applications compiled with parallel mode.
If you use GCC
Check EUVD-2026-113745 for affected and fixed GCC versions
Update GCC to a fixed release when available
Rebuild applications compiled with parallel mode after patching
Check EUVD-2026-113746 for affected and fixed GCC versions
Validate untrusted element counts before constructing std::vector<bool>
Check EUVD-2026-113747 for affected and fixed GCC versions
What the sources say 4
· Mastodon: “A flaw was found in GCC libstdc++.” Source
· Mastodon: “A flaw was found in the libstdc++ component of GCC.” Source
· Mastodon: “A flaw was found in GCC.” Source
· Mastodon: “A flaw was found in gcc.” Source