Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. There's a Stack corruption in std::bitset stream extraction in libstdc++. The __builtin_alloca argument didn't account for the size or alignment of wide characters resulting in a stack buffer overflow.
I don't think a bug in a compiler qualifies for a CVE. This will be fixed with regular upstream gcc releases, as they become available.