CVE-2026-115456

cpp: gcc: Out-of-bounds read in std::from_chars

CVE-2026-115456 is fixed in 67 products on 1 platform, first by RHSA-2026:98524, released November 12, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
3.7
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0022
12th percentile

gcc: Out-of-bounds read in std::from_chars

Where it's fixed

ProductFixed inFixReleased
Linux
cpp · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc · RHEL 10 14.4.1-5.el10_3 RHSA-2026:98648 Nov 12, 2026
gcc · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc-c++ · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc-gfortran · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc-offload-nvptx · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc-plugin-annobin · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc-plugin-devel · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
gcc-toolset · RHEL 10 16-gcc-0:16.2.1-1.4.el10_3 RHSA-2026:98640 Nov 12, 2026
gcc-toolset-15-gcc · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-gcc-c++ · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-gcc-gfortran · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-gcc-plugin-annobin · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-gcc-plugin-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libasan-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libatomic-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libgccjit · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libgccjit-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libitm-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-liblsan-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libquadmath-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libstdc++-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libstdc++-docs · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libtsan-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-libubsan-devel · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-15-offload-nvptx · RHEL 9 0:15.2.1-7.4.el9_9 RHSA-2026:98526 Nov 12, 2026
gcc-toolset-16-gcc · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-gcc-c++ · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-gcc-gfortran · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-gcc-plugin-annobin · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-gcc-plugin-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libasan-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libatomic-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libgccjit · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libgccjit-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libgdiagnostics-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libitm-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-liblsan-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libquadmath-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libstdc++-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libstdc++-docs · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libtsan-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-libubsan-devel · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
gcc-toolset-16-offload-nvptx · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
libasan · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libasan8 · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
libatomic · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgcc · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgccjit · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgccjit-devel · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgdiagnostics · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
libgfortran · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgfortran-static · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgomp · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libgomp-offload-nvptx · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libitm · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libitm-devel · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
liblsan · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
libquadmath · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libquadmath-devel · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libquadmath-static · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libstdc++ · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libstdc++-devel · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libstdc++-docs · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libstdc++-static · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libtsan · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026
libtsan2 · RHEL 9 0:16.2.1-1.4.el9_9 RHSA-2026:98534 Nov 12, 2026
libubsan · RHEL 9 0:11.5.0-17.el9_9 RHSA-2026:98524 Nov 12, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.