This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-115455 →
Unrated
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fail...
DEBIAN-CVE-2026-115455
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Debian:12gcc-11 |
All versions→ Not listed |
Not listed |
| Debian:12gcc-12 |
All versions→ Not listed |
Not listed |
| Debian:13gcc-12 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-12 |
All versions→ Not listed |
Not listed |
| Debian:13gcc-13 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-13 |
All versions→ Not listed |
Not listed |
| Debian:13gcc-14 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-14 |
< 14.4.0-4→ 14.4.0-4 |
14.4.0-4 |
| Debian:14gcc-15 |
All versions→ Not listed |
Not listed |
| Debian:14gcc-16 |
All versions→ Not listed |
Not listed |
Original description The description as published by the source.
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory security-tracker.debian.org