---
id: CVE-2026-115455
title: 'Gcc: stack overflow in std::bitset on libstdc++'
summary: >-
  A flaw was found in GCC libstdc++. When an application extracts data into a
  bitset from a wide-character stream, internal stack memory allocation fails to
  properly account for character size and alignment. An attacker capable of
  supplyin…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
cvssSource: cna
cwe:
  - CWE-787
vendor: Red Hat
product: gcc
affected:
  - gcc (all versions)
  - gcc-toolset-15-gcc (all versions)
  - gcc-toolset-16-gcc (all versions)
  - mingw-gcc (all versions)
  - compat-gcc-295
  - compat-gcc-296
  - compat-gcc-32
  - compat-gcc-34
  - gcc
  - compat-gcc-32
  - compat-gcc-34
  - compat-gcc-44
  - gcc
  - gcc
  - gcc-toolset-14-gcc
  - gcc-toolset-15-gcc
  - mingw-gcc
  - gcc
  - gcc-toolset-14-gcc
  - gcc-toolset-15-gcc
  - gcc-toolset-16-gcc
  - mingw-gcc
  - gcc (all versions)
  - gcc13 (all versions)
  - openshift/ose-rhel-coreos-8
  - openshift/ose-rhel-coreos-9
  - openshift/ose-rhel-coreos-9
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T07:13:06.547Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115455'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-115455'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2562933'
    label: RHBZ#2562933
  - url: >-
      https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219
tags:
  - cve.org
epss: 0.00303
epssPercentile: 0.23118
ingestedAt: '2026-11-03T10:42:03.631Z'
---

## Overview

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).

## Affected

- `gcc (all versions)`
- `gcc-toolset-15-gcc (all versions)`
- `gcc-toolset-16-gcc (all versions)`
- `mingw-gcc (all versions)`
- `compat-gcc-295`
- `compat-gcc-296`
- `compat-gcc-32`
- `compat-gcc-34`
- `gcc`
- `compat-gcc-32`
- `compat-gcc-34`
- `compat-gcc-44`
- `gcc`
- `gcc`
- `gcc-toolset-14-gcc`
- `gcc-toolset-15-gcc`
- `mingw-gcc`
- `gcc`
- `gcc-toolset-14-gcc`
- `gcc-toolset-15-gcc`
- `gcc-toolset-16-gcc`
- `mingw-gcc`
- `gcc (all versions)`
- `gcc13 (all versions)`
- `openshift/ose-rhel-coreos-8`
- `openshift/ose-rhel-coreos-9`
- `openshift/ose-rhel-coreos-9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.