What’s Vulnerable › Vulnerabilities

CVE-2026-13732: Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

Description

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Affected products

How to fix

Upgrade to a fixed version: Red Hat Cost Management On-Premise 1 1791460851; Red Hat Enterprise Linux 10 0:16.3-3.1.el10_2; Red Hat Enterprise Linux 8 0:8.2-20.1.el8_10; Red Hat Enterprise Linux 9 0:16.3-3.1.el9_8; Red Hat Hardened Images 17.2-6.2.hum1; Red Hat Update Infrastructure 5 1791964013, 1791978528, 1791978534, 1791978693. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-13732 or the next vulnerability affects your stack