CVE-2026-102010

🚨HIGH - GCC libstdc++ erase_if Priority Queue Use-After-Free (CVE-2026-102010) GCC libstdc++ triggers a UAF when std::erase_if() is used on a binary-heap std::priority_queue: internal storage is reallocated but an internal entry pointer isn’t updated, leaving a dangling reference. An attacker can induce a crash (DoS) and potentially memory corruption via crafted inputs reaching the erase_if path. 👉Affected: gcc / libstdc++ (versions with erase_if binary-heap priority_queue support), incl. gcc-toolset-15-gcc, gcc-toolset-16, gcc-toolset-16-gcc, mingw-gcc

CVE-2026-102010 A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to … https://www.cve.org/CVERecord?id=CVE-2026-102010