{"id":"CVE-2026-123151","kind":"vulnerability","aliases":["CVE-2026-123151"],"related":[],"title":"GDB: malicious remote debug target can overflow stack and run code","description":"A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with the privileges of the user running GDB.","summary":"GNU Debugger (GDB) overflows a stack buffer while parsing replies from a remote debug target. A malicious target can crash GDB or run arbitrary code in the GDB client with the privileges of the user running it.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","gdb","linux","remote-debugging","runtime"],"not_affected_if":["local-debugging-only","no-remote-targets"],"how_to_check":"- Run `gdb --version` to see the installed GDB version and compare it with the fixed version, which the sources do not state.\n- Check whether developers connect GDB to remote targets (for example `target remote` or `gdbserver` sessions) against hosts they do not fully trust.","fix":null,"status":"open","published_at":"2026-11-05T17:18:03+00:00","first_seen_at":"2026-11-05T17:40:04+00:00","triaged_at":"2026-11-05T17:42:41+00:00","updated_at":"2026-11-05T17:42:41+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-05T17:42:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"GDB: malicious remote debug target can overflow stack and run code","impact":"high","summary":"GNU Debugger (GDB) overflows a stack buffer while parsing replies from a remote debug target. A malicious target can crash GDB or run arbitrary code in the GDB client with the privileges of the user running it.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["gdb","embedded","remote-debugging","linux"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker-controlled remote target runs code as the GDB user","analyst_note":"Find the affected GDB version range and fixed release from the GDB project or the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-123151.","how_to_check":"- Run `gdb --version` to see the installed GDB version and compare it with the fixed version, which the sources do not state.\n- Check whether developers connect GDB to remote targets (for example `target remote` or `gdbserver` sessions) against hosts they do not fully trust.","plain_action":"","needs_analyst":true,"not_affected_if":["local-debugging-only","no-remote-targets"],"who_is_affected":"Anyone who runs GDB and connects it to a remote debug target, such as a gdbserver on an embedded board, a VM or a device under test. Local debugging of programs without a remote connection is not described as affected. Teams that only debug locally, or only connect to targets they fully control, are lower risk. The sources do not say which GDB versions are affected.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000715,"input_tokens":4209,"output_tokens":589,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-123151':14A,17A '-2026':13A,16A 'allow':103C 'arbitrari':48B,108C 'buffer':31B,87C 'caus':82C 'client':53B,113C 'code':11A,49B,109C 'connect':72C 'crash':44B,99C 'cve':12A,15A 'debug':4A,23B,38B,76C 'debugg':26B,68C 'embed':18B 'execut':107C 'flaw':62C 'found':64C 'gdb':1A,19B,27B,45B,52B,69C,71C,83C,100C,112C,122C 'gnu':25B,67C 'linux':20B 'malici':2A,41B,79C 'overflow':7A,28B,85C 'pars':33B,92C 'potenti':102C 'privileg':56B,117C 'process':114C 'remot':3A,22B,37B,75C 'remote-debug':21B 'repli':34B,96C 'run':10A,47B,60B,121C 'runtim':24B 'stack':8A,30B,90C 'target':5A,39B,42B,77C,80C,94C,105C 'user':59B,120C","nicknames":[],"mitigations":[],"who_affected":"Anyone who runs GDB and connects it to a remote debug target, such as a gdbserver on an embedded board, a VM or a device under test. Local debugging of programs without a remote connection is not described as affected. Teams that only debug locally, or only connect to targets they fully control, are lower risk. The sources do not say which GDB versions are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["embedded","gdb","linux","remotedebugging","runtime","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T17:18:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123151","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123151","severity":null,"published_at":"2026-11-05T17:18:03+00:00","modified_at":"2026-11-05T17:18:03+00:00","first_seen_at":"2026-11-05T17:40:04+00:00","fetched_at":"2026-11-05T17:40:04+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}