CVE-2026-115456
Low 3.7
Description
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or an application crash.
Metrics
- CVSS 3.1
-
3.7 (LOW)
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - EPSS — exploit probability
- 0% (percentile: 13) as of 1 November 2026
- CWE
- CWE-125