CVE-2026-123151 · Runtime
NO FIX YET
GNU Debugger (GDB) overflows a stack buffer while parsing replies from a remote debug target. A malicious target can crash GDB or run arbitrary code in the GDB client with the privileges of the user running it.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Anyone who runs GDB and connects it to a remote debug target, such as a gdbserver on an embedded board, a VM or a device under test. Local debugging of programs without a remote connection is not described as affected. Teams that only debug locally, or only connect to targets they fully control, are lower risk. The sources do not say which GDB versions are affected.
Not affected if local-debugging-only, no-remote-targets
Who cares embedded, gdb, linux, remote-debugging
gdb --version to see the installed GDB version and compare it with the fixed version, which the sources do not state.target remote or gdbserver sessions) against hosts they do not fully trust.No fix yet, per the sources.
A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.