← CVE index
Vulnerability record/PUBLISHED/Published Nov 10, 2026 11:23:22 UTC

CVE-2026-125709

A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigger a buffer overflow, potentially resulting in a Denial of Service (DoS) or memory corruption.

Base score4.2/ 10
SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityMedium
Attack vectorNetworkAV
Attack complexityHighAC
Privileges requiredNonePR
User interactionRequiredUI
ScopeUnchangedS
Confidentiality impactNoneC
Integrity impactLowI
Availability impactLowA
CVSS vector stringCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityredhat
Last updatedNov 14, 2026 06:56:38 UTC
PublishedNov 10, 2026 11:23:22 UTC
ReservedNov 10, 2026 10:33:26 UTC