Yüksek CVSS 8.8
CVE-2026-121994: CVE-2026-121994: yığıt (stack) taşması
Açıklama (NVD)
A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetch_register_using_p, which decodes a stub's register reply into an alloca-sized buffer without bounding writes by the register width.
Özet bilgiler
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,48 (yüzdelik 42)
- CWE
- CWE-121
- Yama
- Yok / bilinmiyor