Integer Wrap Vulnerability in GCC's libstdc++ Component Affecting Applications

CVE-2026-114691

What is CVE-2026-114691?

A vulnerability has been identified in the libstdc++ component of the GCC (GNU Compiler Collection). Attackers can exploit this flaw by providing an excessively large element count to the constructor of a boolean vector (std::vector). This action may cause an integer wrap during internal memory calculations, resulting in the container entering an inconsistent state. Consequently, this can permit out-of-bounds memory access, potentially leading to application crashes or creating conditions that allow Denial of Service (DoS) during subsequent operations.

References