This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-114691 →
Unrated
A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector) c...
DEBIAN-CVE-2026-114691
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Debian:12gcc-11 |
All versions→ Not listed |
Not listed |
| Debian:12gcc-12 |
All versions→ Not listed |
Not listed |
| Debian:13gcc-12 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-12 |
All versions→ Not listed |
Not listed |
| Debian:13gcc-13 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-13 |
All versions→ Not listed |
Not listed |
| Debian:13gcc-14 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-14 |
< 14.4.0-4→ 14.4.0-4 |
14.4.0-4 |
| Debian:14gcc-15 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-16 |
All versions→ Not listed |
Not listed |
Original description The description as published by the source.
A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory security-tracker.debian.org