This vulnerability in GCC's libstdc++ arises from the erase_if function on a binary heap priority queue reallocating storage without updating its internal entry pointer, causing a use-after-free condition. An attacker able to trigger this operation may cause a denial of service via application crash or memory corruption. The issue is under investigation by Red Hat Product Security, with no confirmed affected versions or fixes published yet. The CVSS v3.1 score assigned by Red Hat is 7.3 (high severity), reflecting local attack vector, low complexity, no privileges or user interaction required, and high availability impact.

The vulnerability can cause denial of service through application crashes or potential memory corruption when the erase_if function is triggered on a binary heap priority queue. Confidentiality and integrity impacts are low, but availability impact is high. There are no known exploits in the wild at this time.

Red Hat Product Security is still investigating this vulnerability and has not yet released a fix. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-102010 for current remediation guidance. No specific mitigations have been published. Users should monitor the vendor advisory for updates and apply patches once available.