Fedora Account System
Red Hat Associate
Red Hat Customer
An integer overflow triggered when processing inputs to the C++ `new` operator in libstdc+-v3/libsupc+/new_opa.cc where sz + align could overflow with large sz or align, potentially resulting in an undersized allocation instead of throwing bad_alloc. Note that this only affects older gcc versions since 12.4 onwards (see pr113258) prefer posix_memalign over aligned_alloc so on the RHEL front this should only affect RHEL9 and RHEL8 system gcc. The older libstdc++ (8.5.0) has a slightly different variant of that expression but has the same overflow problem.