CVE-2026-95619
7.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Summary
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Hardened Images | 16.2.1-2.hum1 < * | unaffected |
| Red Hat | Red Hat Hardened Images | 13.5.0-0.1.hum1 < * | unaffected |
Weaknesses
- CWE-190: Integer Overflow or Wraparound
Workarounds
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://access.redhat.com/errata/RHSA-2026:58503
- https://access.redhat.com/errata/RHSA-2026:67275
- https://access.redhat.com/security/cve/CVE-2026-95619
- https://bugzilla.redhat.com/show_bug.cgi?id=2537811
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.