EM-20261105-QHI8
VulnerabilityHigh severity
GNU Vulnerability (CVE-2026-123151)
CVE-2026-123151
Status
Developing
Since : signals keep joining.
- First Signal
- Nov 05 14:58 UTCC41 Red Hat Security Data
- Page Born
- Nov 05 17:18 UTCsecond source joined
- Last Signal
- Nov 05 17:18 UTC12 hours before snapshot
- Sources
- 21 official · 1 research, news or crowd
- Open For
- 10 hoursso far
Life Of This Page
- 1BornA second, independent source names it.
- 2Developing · NowNew signals join; severity can move.
- 3ConfirmedNot yetCISA KEV lists it, or exploitation in the wild is reported.
- 4ResolvedNot yetPast the fix deadline and 14 days with no new signal.
- 5ArchivedNot yet30 days after resolved. Read only; the link keeps working. Reopens if it comes back.
The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.
Vulnerability Lifecycle
- Disclosed: reachedNov 05 17:18 UTCC6 NVD published
- Scored: reachedNov 05 17:18 UTCCVSS 7.5
- Exploited: not yetNot yetNo exploitation reported
- Advisories: not yetNot yetNone yet
- Vendor Response: reachedNov 05 14:58 UTCC41 published
- Resolved: not yetNot yetAfter 14 quiet days
Timeline
Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.
Signals
- CVE-2026-123151 (CVSS 7.5) (opens source in a new tab) A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potenti… High severityDatabaseC6 NVD CVE API 2.0
- Red Hat: CVE-2026-123151 (important) (opens source in a new tab) gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail High severityVendorC41 Red Hat Security Data