Threats tagged 'ghsa-8xgh-vfg7-p2g8'

A stack buffer overflow vulnerability exists in the GDB client's remote protocol handler, specifically in the fetch_register_using_p function. This flaw allows an attacker-controlled debug target to execute arbitrary code within the GDB process. The vulnerability arises because the function decodes a stub's register reply into an alloca-sized buffer without properly bounding writes by the register width. There is no mitigation available other than avoiding connection to untrusted debug targets.