CVE-2026-121995High· 7.5▾ TwilightA stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffer.
crashgdb (all versions)gdb (all versions)gdb (all versions)crashgcc-toolset-14-gdb (all versions)gcc-toolset-15-gdb (all versions)gdb (all versions)crashgdb (all versions)gdb (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
There is no mitigation for this vulnerability. Users should only connect GDB to trusted debug targets.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
CVE-2026-121994High· 8.8Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
CVE-2026-121997High· 8.1Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
CVE-2026-121996High· 8.2Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
CVE-2024-1151Medium· 5.5Kernel: stack overflow problem in open vswitch kernel module leading to dos
CVE-2023-6693Medium· 4.9Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()