Skip to content
OpenAdvisories
High · 8.1 CVE-2026-121997 EUVD-2026-117574GHSA-jq36-9pw3-8r4v

Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Published Nov 5, 2026 · Updated Nov 6, 2026 · Assigned by redhat

Description

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to write beyond the allocated heap buffer.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Hardened Images — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 gdb No fix yet —
Debian 13 gdb No fix yet —
Debian 12 gdb No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 gdb No fix yet —
Ubuntu 26.04 LTS gdb No fix yet —
Ubuntu 24.04 LTS gdb No fix yet —
Ubuntu 22.04 LTS gdb No fix yet —
Ubuntu 20.04 LTS gdb No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS gdb No fix yet —
Ubuntu Pro 16.04 LTS gdb No fix yet —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 gdb +1 No fix yet —

References