
🚨High - libstdc++ operator new Integer Overflow Memory Corruption (CVE-2026-95619) libstdc++’s global operator new can integer-overflow when sizing allocations for very large requested sizes, resulting in an undersized malloc/new and subsequent out-of-bounds writes during object/array construction. Exploitation can lead to memory corruption, crashes, and potentially code execution in affected C++ apps; normal-sized allocations are not impacted. 👉Affected: gcc/libstdc++, mingw-gcc, compat-gcc-295/296/32 (versions shipping vulnerable libstdc++)
