CVE-2026-125709— Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.

Quick assessment

Affected

Red Hat Red Hat Enterprise Linux 10

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 libstdc++ 中发现一个漏洞：当文件流处理过程中逐字节写入操作失败时，该库仍可能将数据追加到内部内存缓冲区中。能够诱使受影响服务反复发生写入失败的攻击者可触发缓冲区溢出，进而可能导致拒绝服务（DoS）或内存损坏。

CVSS 4.2 · Medium Updated Nov 10, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in libstdc++. When a byte-by-byte write operation fails during file stream processing, the library may still append data into the internal memory buffer. An attacker capable of inducing repeated write failures in an affected service can trigger a buffer overflow, potentially resulting in a Denial of Service (DoS) or memory corruption.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/a:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/a:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/a:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/a:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:rhel_els:6`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:rhel_els:6`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:rhel_els:6`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:rhel_els:6`
Red Hat	Red Hat Enterprise Linux 6	-	`cpe:/o:redhat:rhel_els:6`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 7	-	`cpe:/o:redhat:rhel_els:7`
Red Hat	Red Hat Enterprise Linux 8	-	`cpe:/a:redhat:enterprise_linux:8`
Red Hat	Red Hat Enterprise Linux 8	-	`cpe:/a:redhat:enterprise_linux:8`
Red Hat	Red Hat Enterprise Linux 8	-	`cpe:/a:redhat:enterprise_linux:8`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/a:redhat:enterprise_linux:9`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/a:redhat:enterprise_linux:9`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/a:redhat:enterprise_linux:9`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/a:redhat:enterprise_linux:9`
Red Hat	Red Hat Hardened Images	-	`cpe:/a:redhat:hummingbird:1`
Red Hat	Red Hat Hardened Images	-	`cpe:/a:redhat:hummingbird:1`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 5	-	`cpe:/a:redhat:openshift:5`

II. Public POCs for CVE-2026-125709

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125709

请登录查看更多情报信息。

Other References for CVE-2026-125709 (2)

https://access.redhat.com/security/cve/CVE-2026-125709 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2569390 issue-tracking x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-125709

Same Patch Batch · Red Hat · 2026-11-10 · 11 CVEs total

CVE-2026-120399	7.5 HIGH	Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext
CVE-2026-124747	7.5 HIGH	Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the report
CVE-2026-125712	7.5 HIGH	Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing
CVE-2026-125704	7.5 HIGH	Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization
CVE-2026-125652	6.8 MEDIUM	Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions
CVE-2026-125672	6.6 MEDIUM	Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis tok
CVE-2026-121885	6.5 MEDIUM	Podman: untrusted image labels allow auto-update to restart arbitrary systemd units
CVE-2026-125707	6.1 MEDIUM	Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table
CVE-2026-125706	5.5 MEDIUM	Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing
CVE-2026-125703	5.5 MEDIUM	Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 10

Same vendor: Red Hat

Same weakness: CWE-787