A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Références
- advisory security-tracker.debian.org