{"id":"CVE-2026-121994","published":"2026-11-05T17:18:00.503","lastModified":"2026-11-06T05:18:23.807","description":"A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetch_register_using_p, which decodes a stub's register reply into an alloca-sized buffer without bounding writes by the register width.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-121994","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565676","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack buffer overflow in GDB's remote protocol handler (fetch_register_using_p) lets a malicious debug target write past a stack-allocated buffer when decoding register replies, enabling arbitrary code execution in the GDB process.","exploitability":"Exploitation requires an attacker-controlled GDB debug target to send a specially crafted register reply packet during a remote debugging session with user interaction (e.g., connecting to a malicious target); no authentication is needed.","blast_radius":"Successful exploitation grants full RCE in the GDB process, potentially compromising developer workstations or CI systems where GDB is used for debugging untrusted binaries.","remediation":"Upgrade to GDB version 15.2 or later, as this version includes the fix for CVE-2026-121994.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","stack-overflow","gdb","remote-debugging"],"model":"garnet-coder","analyzedAt":"2026-11-06T09:53:33.678Z"}}