Buffer Overflow Vulnerability in libstdc++ Affects Red Hat Products
CVE-2026-125709

4.2MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
10 November 2026

What is CVE-2026-125709?

A vulnerability exists in libstdc++ where a byte-by-byte write failure during file stream processing can lead to data being appended to an internal memory buffer instead of being properly handled. This flaw allows attackers to repeatedly induce write failures, resulting in potential buffer overflow, which can compromise system integrity and lead to Denial of Service, as well as memory corruption issues.

References

https://access.redhat.com/security/cve/CVE-2026-125709
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2569390
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.