{"id":"CVE-2026-102010","aliases":[],"cve":{"records":[{"id":"CVE-2026-102010","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-28T17:33:28.667Z","published":"2026-09-28T18:54:31.739Z","modified":"2026-10-30T07:47:21.733Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-10-30T07:47:21.733Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-28T20:53:35.116Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:73642","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:74569","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:89830","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:89891","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:90915","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-102010","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478395","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-825","description":"Expired Pointer Dereference","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-28T20:53:04.426502Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.","score":7,"severity":"high","published":"2026-09-28T18:54:31.739Z","modified":"2026-10-30T07:47:21.733Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[{"version":"0:15.2.1-7.1.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:8.5.0-30.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:15.2.1-7.2.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:8.5.0-30.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/a:redhat:enterprise_linux:8::crb","cpe:/o:redhat:enterprise_linux:8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Hardened Images","platforms":[],"versions":[{"version":"13.5.0-0.2.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:hummingbird:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Hardened Images","platforms":[],"versions":[{"version":"16.2.1-3.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:hummingbird:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 5","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:5"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"}],"remediation":[{"text":"Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"}],"references":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"sources":[{"name":"CVE","id":"CVE-2026-102010","modified":"2026-10-30T07:47:21.733Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","score":7}],"sourceAffected":[],"observedAt":"2026-10-30T07:56:07.843Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:00:31.626Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T06:10:33.360Z","attemptedAt":"2026-10-29T06:10:33.360Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T06:10:33.498Z","attemptedAt":"2026-10-29T06:10:33.498Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T06:10:34.374Z","attemptedAt":"2026-10-29T06:10:34.374Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T06:10:32.505Z","attemptedAt":"2026-10-29T06:10:32.505Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-102010","url":"https://www.first.org/epss/","probability":0.00333,"percentile":0.26434,"date":"2026-10-28","checkedAt":"2026-10-29T06:10:32.505Z"},{"source":"NVD","id":"CVE-2026-102010","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","modified":"2026-10-26T14:16:22.300","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","checkedAt":"2026-10-29T06:10:33.360Z"},{"source":"GitHub Advisory Database","id":"GHSA-q3jj-75h6-5xmp","url":"https://github.com/advisories/GHSA-q3jj-75h6-5xmp","modified":"2026-10-26T15:34:17Z","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","checkedAt":"2026-10-29T06:10:33.498Z"},{"source":"ENISA EUVD","id":"EUVD-2026-88443","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88443","modified":"Oct 29, 2026, 5:19:01 AM","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","checkedAt":"2026-10-29T06:10:34.374Z"}],"aiSummary":{"text":"A flaw in GCC's libstdc++ library may cause a Denial of Service (DoS) via application crash or potential memory corruption when an attacker triggers the erase_if function on a binary heap priority queue. The attacker must be able to call this function. The impact is a use-after-free condition.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:36:50.069Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-102010"}]}}