Affected: Alpaquita:23: gcc, Alpaquita:25: gcc, Alpaquita:stream: gcc, BellSoft Hardened Containers:23: gcc, BellSoft Hardened Containers:25: gcc, BellSoft Hardened Containers:stream: gcc

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.

cpp16-16.2.1+git9713-1.1 on GA media

gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if

Affected: Ubuntu:14.04:LTS: gcc-3.3, Ubuntu:14.04:LTS: gcc-4.7, Ubuntu:14.04:LTS: gcc-4.8, Ubuntu:14.04:LTS: gcc-defaults, Ubuntu:14.04:LTS: gcc-mingw-w64, Ubuntu:14.04:LTS: gccgo-4.9, Ubuntu:Pro:16.04:LTS: gcc-5, Ubuntu:16.04:LTS: gcc-5-cross, Ubuntu:16.04:LTS: gcc-defaults, Ubuntu:Pro:16.04:LTS: gccgo-6 and 137 more

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.