Vulnerability Reportdebian:bookworm-20261020-slim

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The main finding, CVE-2026-95619, is a libstdc++ integer overflow in the operator new routine that could corrupt memory in C++ programs that handle very large inputs. Note: CVE-2026-95619 only applies if an application calls the aligned operator new with very large sizes, so its relevance depends on which C++ programs are installed on top of this image. Overall exposure is modest, with no findings at severity 7.0 or higher and none known to be exploited in the wild, so this does not block use as a building block. Images built from it should confirm whether their C++ workloads trigger this condition and apply upstream Debian library updates when they become available. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.