A use‑after‑free flaw has been discovered in libstdc++ when an application calls the erase_if function on a binary heap priority queue. The reallocation performed by the function does not update an internal pointer, allowing an attacker who can trigger the call to cause a crash or corrupt memory. This results in a denial of service through application failure. The flaw is classified as CWE‑825, a memory integrity weakness.

Affected systems include Red Hat Enterprise Linux versions 6, 7, 8, 9 and 10, the Red Hat Hardened Images distribution, the Hummingbird project, and the OpenShift Container Platform 4. Any package that includes the GCC 15 or GCC 16 toolsets on these platforms is potentially vulnerable.

The CVSS score of 7 indicates a high‑impact vulnerability. The EPSS score is not available and the issue is not listed in CISA KEV, suggesting limited known exploitation. Based on the description, the likely attack vector is local: an attacker who can execute code that calls erase_if on a binary heap in an application linked to the vulnerable GCC libstdc++ can trigger the use‑after‑free. No additional prerequisites are specified.