PT-2026-96720 · Libstdc+++2 · Libstdc+++2

CVE-2026-95619

·

Published

2026-09-22

·

Updated

2026-09-22

CVSS v3.1

7.7

High

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions libstdc++ (affected versions not specified) mingw-gcc (affected versions not specified) compat-gcc-295/296/32 (affected versions not specified)
Description An integer overflow occurs in the global aligned operator new when processing very large requested allocation sizes. This leads to an undersized memory allocation, which can result in out-of-bounds writes during the construction of objects or arrays. Such memory corruption can cause application instability, crashes, or potentially remote code execution. Normal-sized allocations are not affected.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-95619

Affected Products

Compat-Gcc
Libstdc++
Mingw-Gcc