| Name | CVE-2026-102010 |
| Description | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 1150194, 1150195, 1150196, 1150197, 1150198 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| gcc-11 (PTS) | bookworm | 11.3.0-12 | vulnerable |
| sid | 11.5.0-13 | fixed | |
| gcc-12 (PTS) | bookworm | 12.2.0-14+deb12u1 | vulnerable |
| trixie | 12.4.0-5 | vulnerable | |
| forky, sid | 12.5.0-11 | fixed | |
| gcc-13 (PTS) | trixie | 13.3.0-16 | vulnerable |
| forky | 13.5.0-1 | vulnerable | |
| sid | 13.5.0-3 | fixed | |
| gcc-14 (PTS) | trixie | 14.2.0-19 | vulnerable |
| forky | 14.4.0-2 | vulnerable | |
| sid | 14.4.0-3 | fixed | |
| gcc-15 (PTS) | forky, sid | 15.3.0-4 | vulnerable |
| gcc-16 (PTS) | forky, sid | 16.2.0-3 | vulnerable |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| gcc-11 | source | (unstable) | 11.5.0-13 | |||
| gcc-12 | source | (unstable) | 12.5.0-11 | 1150198 | ||
| gcc-13 | source | (unstable) | 13.5.0-2 | 1150197 | ||
| gcc-14 | source | (unstable) | 14.4.0-3 | 1150196 | ||
| gcc-15 | source | (unstable) | (unfixed) | 1150195 | ||
| gcc-16 | source | (unstable) | (unfixed) | 1150194 |
[trixie] - gcc-14 <no-dsa> (Minor issue)
[trixie] - gcc-13 <no-dsa> (Minor issue)
[trixie] - gcc-12 <ignored> (Minor issue, not fixed in upstream 12 branch)
[bookworm] - gcc-12 <ignored> (Minor issue, not fixed in upstream 12 branch)
[bookworm] - gcc-11 <ignored> (Minor issue)
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=127656
https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=aaa8351f4d2e636f9680a1f0a8ebc2f0a60611e6
https://bugzilla.redhat.com/show_bug.cgi?id=2478395