CVE-2026-121997 | BDVDB-2026-400796 Detail

Description#

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to write beyond the allocated heap buffer.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-05Record published in the CVE List.
2. Version 22026-11-06Most recent update recorded in the CVE List.