CVE-2026-102010

EUVD-2026-88443
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 37.57%
Debian logo
Debian Releases
Debian Product
Codename
gcc-11
bookworm
ignored
sid
11.5.0-13
fixed
gcc-12
bookworm
ignored
forky
12.5.0-11
fixed
sid
12.5.0-11
fixed
trixie
no-dsa
gcc-13
forky
13.5.0-3
fixed
sid
13.5.0-4
fixed
trixie
no-dsa
gcc-14
forky
14.4.0-3
fixed
sid
14.4.0-4
fixed
trixie
no-dsa
gcc-15
forky
15.3.0-5
fixed
sid
15.3.0-5
fixed
gcc-16
forky
16.2.0-4
fixed
sid
16.2.0-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gcc-3.3
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
trusty
needs-triage
xenial
needs-triage
gcc-4.6
jammy
dne
noble
dne
resolute
dne
gcc-4.7
jammy
dne
noble
dne
resolute
dne
trusty
needs-triage
xenial
needs-triage
gcc-4.8
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
trusty
needs-triage
xenial
needs-triage
gcc-4.9
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-5
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-6
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-7
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-8
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-9
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-10
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-11
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-12
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-13
jammy
dne
noble
needs-triage
resolute
needs-triage
gcc-4.9-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-5-cross
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-5-cross-ports
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-6-cross
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-6-cross-ports
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-7-cross
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-7-cross-ports
bionic
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-8-cross
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-8-cross-ports
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
dne
resolute
dne
gcc-9-cross
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-9-cross-mipsen
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-9-cross-ports
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-10-cross
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-10-cross-mipsen
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-10-cross-ports
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
dne
gcc-11-cross
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-11-cross-mipsen
jammy
dne
noble
needs-triage
resolute
dne
gcc-11-cross-ports
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-12-cross
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-12-cross-mipsen
jammy
dne
noble
needs-triage
resolute
dne
gcc-12-cross-ports
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-13-cross
jammy
dne
noble
needs-triage
resolute
needs-triage
gcc-13-cross-ports
jammy
dne
noble
needs-triage
resolute
needs-triage
gcc-or1k-elf
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-riscv64-unknown-elf
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
gcc-xtensa-lx106
focal
needs-triage
jammy
needs-triage
noble
dne
resolute
dne
gcc-snapshot
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
xenial
needs-triage
gcc-i686-linux-android
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-4.7-armel-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-4.7-armhf-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-4.8-arm64-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-4.8-armhf-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-4.8-powerpc-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-4.8-ppc64el-cross
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-arm-linux-androideabi
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
gcc-arm-none-eabi
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
xenial
needs-triage
gcc-avr
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
xenial
needs-triage
gcc-defaults
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
gcc-h8300-hms
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
xenial
needs-triage
gcc-m68hc1x
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
dne
resolute
dne
xenial
needs-triage
gcc-mingw-w64
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
gcc-msp430
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
dne
resolute
dne
xenial
needs-triage
gccgo-4.9
jammy
dne
noble
dne
resolute
dne
trusty
needs-triage
gccgo-6
jammy
dne
noble
dne
resolute
dne
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cpp48
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
gcc48
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
gcc48-32bit
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
gcc48-c++
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
gcc48-info
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
gcc48-locale
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
gcc48-objc
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
libasan0
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
libasan0-32bit
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
libstdc++48-devel
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
libstdc++48-devel-32bit
suse enterprise sap 12 SP5
4.8.5-31.32.1
fixed
suse enterprise server 12 SP3
4.8.5-31.32.1
fixed
suse enterprise server 12 SP5
4.8.5-31.32.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
cpp
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc-c
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc-gdb-plugin
RHEL 8
0:8.5.0-30.el8_10
fixed
gcc-gfortran
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc-offload-nvptx
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc-plugin-annobin
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc-plugin-devel
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
gcc-toolset-15-gcc
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-gcc-c
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-gcc-gfortran
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-gcc-plugin-annobin
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-gcc-plugin-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libasan-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libatomic-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libgccjit
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libgccjit-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libitm-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-liblsan-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libquadmath-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libstdc
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libtsan-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-libubsan-devel
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-15-offload-nvptx
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:15.2.1-7.3.el9_9
fixed
gcc-toolset-16-gcc
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-gcc-c
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-gcc-gfortran
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-gcc-plugin-annobin
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-gcc-plugin-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libasan-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libatomic-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libgccjit
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libgccjit-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libgdiagnostics-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libitm-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-liblsan-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libquadmath-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libstdc
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libtsan-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-libubsan-devel
RHEL 9
0:16.2.1-1.3.el9_9
fixed
gcc-toolset-16-offload-nvptx
RHEL 9
0:16.2.1-1.3.el9_9
fixed
libasan
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libasan8
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:16.2.1-1.3.el9_9
fixed
libatomic
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libatomic-static
RHEL 8
0:8.5.0-30.el8_10
fixed
libgcc
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libgccjit
RHEL 9
0:11.5.0-16.el9_9
fixed
libgccjit-devel
RHEL 9
0:11.5.0-16.el9_9
fixed
libgdiagnostics
RHEL 9
0:16.2.1-1.3.el9_9
fixed
libgfortran
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libgfortran-static
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libgomp
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libgomp-offload-nvptx
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libitm
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libitm-devel
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
liblsan
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:16.2.1-1.3.el9_9
fixed
libquadmath
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libquadmath-devel
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libquadmath-static
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libstdc
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libtsan
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed
libtsan2
RHEL 8
0:15.2.1-7.2.el8_10
fixed
RHEL 9
0:16.2.1-1.3.el9_9
fixed
libubsan
RHEL 8
0:8.5.0-30.el8_10
fixed
RHEL 9
0:11.5.0-16.el9_9
fixed