GNU GDB: Stack buffer overflow in tracepoint upload handler (CVE-2026-121995)
A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory during connection setup.
CVE search metadata
CVE search record: CVE-2026-121995. Severity: high. CVSS: 7.5. KEV: no. Product: GDB. Brief: GNU GDB: Stack buffer overflow in tracepoint upload handler (CVE-2026-121995). Brief link: https://feed.craftedsignal.io/briefs/2026-11-gdb-buffer-overflow-7dbfec4f/
Triage facts
Revision 1- Applicability
- GDB
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 20:29 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-121995 is a stack buffer overflow vulnerability in the GDB client's tracepoint upload handler. During connection setup, an attacker-controlled debug stub can trigger the overflow by causing GDB to read beyond the current reply boundary into a stale prior reply in the shared packet buffer, resulting in corruption of stack memory.