{"id":"AZL-107979","summary":"CVE-2026-102010 affecting package gcc 13.2.0-7","details":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.","modified":"2026-10-15T05:37:09Z","published":"2026-09-28T19:16:48Z","upstream":["CVE-2026-102010"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010"}],"affected":[{"package":{"name":"gcc","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/gcc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"13.2.0-7"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107979.json"}}],"schema_version":"1.9.0"}