AZL-107979

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107979.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-107979
Upstream
  • CVE-2026-102010
Published
2026-09-28T19:16:48Z
Modified
2026-10-15T05:37:09Z
Summary
CVE-2026-102010 affecting package gcc 13.2.0-7
Details

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.

References

Affected packages

Azure Linux:3 / gcc

Package

Name
gcc
Purl
pkg:rpm/azure-linux/gcc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
13.2.0-7

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107979.json"