Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to write beyond the allocated heap buffer.

Etkilenen sürümler6 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-121997 Diğer

Kayıt geçmişi

1. 5 Kas 2026 19:08Yayımlandı

İlgili açıklar

• 6,6 CVE-2026-111253Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transaction
• 8,2 CVE-2026-121996Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
• 7,5 CVE-2026-121995Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
• 8,8 CVE-2026-121994Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
• 6,5 CVE-2026-121259Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator
• 6,5 CVE-2026-119843Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags