🚨High - libstdc++ operator new Integer Overflow Memory Corruption (CVE-2026-95619) libstdc++’s global operator new can integer-overflow when sizing allocations for very large requested sizes, resulting in an undersized malloc/new and subsequent out-of-bounds writes during object/array construction. Exploitation can lead to memory corruption, crashes, and potentially code execution in affected C++ apps; normal-sized allocations are not impacted. 👉Affected: gcc/libstdc++, mingw-gcc, compat-gcc-295/296/32 (versions shipping vulnerable libstdc++)
Post summary
The tweet discloses a newly assigned CVE‑2026‑95619 affecting libstdc++'s global operator new, where large allocation requests can cause an integer overflow, leading to undersized memory allocation, out‑of‑bounds writes, memory corruption, crashes, and possible code execution in affected C++ applications.