CVE-2026-95619

Published Sep 22, 2026

Last updated a month ago

CVSS high 7.7
C++

Overview

Description
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.
Source
secalert@redhat.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.7
Impact score
5.5
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Severity
HIGH

Weaknesses

secalert@redhat.com
CWE-190

Social media

Hype score
Not currently trending

Related CVEs

  1. A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.•CVE-2026-102010
  2. Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.•CVE-2026-69522
  3. Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.•CVE-2026-69439
  4. An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.•CVE-2026-19642
  5. An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.•CVE-2026-19643

References

Sources include official advisories and independent security research.