CVE-2026-114690

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the process to crash and leading to a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because exploitation requires applications to be built with optional, non-default parallel extensions. The blast radius is limited to the calling application process, where processing crafted input can cause abnormal program termination or memory corruption rather than privilege escalation or remote code execution. Standard builds utilizing default libstdc++ library configurations are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.