{
  "cveId": "CVE-2026-115455",
  "url": "https://patchblox.com/security/cve/CVE-2026-115455",
  "summary": "CVE-2026-115455 is fixed in 41 products on 1 platform, first by RHSA-2026:98648, released November 12, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Gcc: stack overflow in std::bitset on libstdc\u002B\u002B",
  "description": "A flaw was found in GCC libstdc\u002B\u002B. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).",
  "published": "2026-10-28T15:46:24Z",
  "severity": "Moderate",
  "cvss": 6.5,
  "cwe": "Out-of-bounds Write",
  "epss": 0.00314,
  "epssPercentile": 0.24582,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-115455",
  "fixes": [
    {
      "platform": "linux",
      "product": "gcc",
      "release": "RHEL 10",
      "fixedVersion": "14.4.1-5.el10_3",
      "fix": "RHSA-2026:98648",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98648",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset",
      "release": "RHEL 10",
      "fixedVersion": "16-gcc-0:16.2.1-1.4.el10_3",
      "fix": "RHSA-2026:98640",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98640",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-gcc",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-gcc-c\u002B\u002B",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-gcc-gfortran",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-gcc-plugin-annobin",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-gcc-plugin-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libasan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libatomic-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libgccjit",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libgccjit-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libitm-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-liblsan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libquadmath-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libstdc\u002B\u002B-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libstdc\u002B\u002B-docs",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libtsan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-libubsan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-15-offload-nvptx",
      "release": "RHEL 9",
      "fixedVersion": "0:15.2.1-7.4.el9_9",
      "fix": "RHSA-2026:98526",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98526",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-gcc",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-gcc-c\u002B\u002B",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-gcc-gfortran",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-gcc-plugin-annobin",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-gcc-plugin-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libasan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libatomic-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libgccjit",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libgccjit-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libgdiagnostics-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libitm-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-liblsan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libquadmath-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libstdc\u002B\u002B-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libstdc\u002B\u002B-docs",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libtsan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-libubsan-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "gcc-toolset-16-offload-nvptx",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "libasan8",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "libgdiagnostics",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "liblsan",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    },
    {
      "platform": "linux",
      "product": "libtsan2",
      "release": "RHEL 9",
      "fixedVersion": "0:16.2.1-1.4.el9_9",
      "fix": "RHSA-2026:98534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-98534",
      "released": "2026-11-12T01:57:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-12T07:53:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}