Description
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.
Published: 2026-09-22
Score: 7.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 22 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Sep 2026 18:15:00 +0000

Type Values Removed Values Added
References

Tue, 22 Sep 2026 17:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` operator. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability. A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.

Tue, 22 Sep 2026 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux
Redhat openshift
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat enterprise Linux
Redhat openshift

Tue, 22 Sep 2026 13:45:00 +0000

Type Values Removed Values Added
Title Gcc: libstd++: libstdc++ integer overflow in `new` operator Gcc: libstdc++ integer overflow in `new` operator

Tue, 22 Sep 2026 13:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` operator. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.
Title Gcc: libstd++: libstdc++ integer overflow in `new` operator
First Time appeared Redhat
Redhat hummingbird
Weaknesses CWE-190
CPEs cpe:/a:redhat:hummingbird:1
Vendors & Products Redhat
Redhat hummingbird
References
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H'}

Subscriptions

Redhat Enterprise Linux Hummingbird Openshift
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-09-22T17:57:31.834Z

Reserved: 2026-09-22T10:25:12.951Z

Link: CVE-2026-95619

cve-icon Vulnrichment

Updated: 2026-09-22T17:26:01.329Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-22T13:17:13.300

Modified: 2026-09-22T19:37:36.747

Link: CVE-2026-95619

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T20:15:09Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound