Threat intelligence dashboard
CVE-2026-102010high

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.

Risk score

7.0

CVSS 3.1

Vendor
Red Hat
Product
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4
CWE
CWE-825
Published
Sep 28, 2026
Updated
Sep 28, 2026
CISA KEV
Not flagged

Affected products and versions

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 7

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 7

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 7

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 7

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Red Hat Hardened Images

Red Hat

No affected version range was provided.

Red Hat Hardened Images

Red Hat

No affected version range was provided.

Red Hat OpenShift Container Platform 4

Red Hat

No affected version range was provided.

Red Hat OpenShift Container Platform 4

Red Hat

No affected version range was provided.

Technical metrics

7.0

CVSS 3.1

Severity
high
Source
redhat
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H