Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
gcc 13.2.0-7 can crash from crafted input
published 5 days ago
Summary
The GNU Compiler Collection version 13.2.0-7 may overflow its internal memory when a program reads specially crafted wide-character data, causing the program to stop working. This could be used by an attacker to shut down services that rely on this library. Update to a patched version of gcc or apply the vendor's recommended fix as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | gcc | <= 13.2.0-7 |
Original advisory text
CVE-2026-115455 affecting package gcc 13.2.0-7
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).
References
Timeline
Published30 Oct 2026
Updated2 Nov 2026
First seen2 Nov 2026
Sources
AZL-112433 · OSV
Track software like this
Free during beta