Threats tagged 'ghsa-gxgg-8p4f-8xhq'

CVE-2026-121995 is a stack buffer overflow vulnerability in the GDB client's tracepoint upload handler. It occurs during the target remote connection handshake when the remote debug stub reports tracepoint support. This overflow results from GDB reading beyond the current reply boundary into stale data in the shared packet buffer, leading to automatic stack memory corruption. The vulnerability requires user interaction to initiate the connection and has a high complexity for exploitation due to stack canary protections. There is no available patch or mitigation other than connecting GDB only to trusted debug targets.