CVE-2026-115456 — Vulnerability intelligence
—
Published:
- CVSS
- 3.7
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or an application crash.