CVE-2026-114691

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations.

Red Hat has rated this vulnerability as Moderate severity because successful exploitation requires an application to accept attacker-controlled, near-maximum integer values during container initialization. Although the resulting memory corruption can lead to application crashes, the blast radius is confined to the execution scope of the target process. Standard vector reallocation and growth mechanisms are not affected due to existing capacity bounds, significantly reducing practical exposure in typical software environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.