Stack Buffer Overflow in GDB Client Remote Protocol Handler by Red Hat
CVE-2026-121994
8.8HIGH
What is CVE-2026-121994?
A stack buffer overflow vulnerability has been identified in the GDB client's remote protocol handler. This flaw allows an attacker to manipulate the debug target, enabling the execution of arbitrary code within the GDB process. The underlying issue lies in the 'fetch_register_using_p' function, which inadequately bounds write operations to a buffer that has been allocated using 'alloca', exposing it to potentially malicious input from a vulnerable register reply. This vulnerability necessitates urgent attention to ensure the integrity and security of systems utilizing GDB.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Pulkit Singh Singaria for reporting this issue.