CVE-2026-121996: CVE-2026-121996: güvenlik açığı

Açıklama (NVD)

A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeating ASLR in further exploitation.

Özet bilgiler

CVSS v3.1

8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

EPSS

%0,47 (yüzdelik 41)

CWE

CWE-822

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• CWE-822