AZL-113408

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113408.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-113408
Upstream
  • CVE-2026-125709
Published
2026-11-10T12:17:18Z
Modified
2026-11-13T14:17:22Z
Summary
CVE-2026-125709 affecting package gcc 13.2.0-7
Details

A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigger a buffer overflow, potentially resulting in a Denial of Service (DoS) or memory corruption.

References

Affected packages

Azure Linux:3 / gcc

Package

Name
gcc
Purl
pkg:rpm/azure-linux/gcc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
13.2.0-7

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113408.json"