Every CVE Search/ Get API key

CVE-2026-13732

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

7.0 HighFix available

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.13%Unchanged since Sep 1, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.0

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
CVE-2026-13732
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-04
EUVDEUVD-2026-68746 7.0

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
EUVD-2026-68746
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-j2fm-9w3c-hpj9 7.8

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb...

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
GHSA-j2fm-9w3c-hpj9
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 7.0

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
CVE-2026-13732
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-04
OSVBELL-CVE-2026-13732 7.0
Record
BELL-CVE-2026-13732
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-13732 7.0

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
DEBIAN-CVE-2026-13732
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
Show 23 moreShow less
OSVOESA-2026-4505 7.0

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)

Record
OESA-2026-4505
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4506 7.0

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)

Record
OESA-2026-4506
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4507 7.0

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)

Record
OESA-2026-4507
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4508 7.0

gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)

Record
OESA-2026-4508
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:73425 7.0

Red Hat Security Advisory: gdb security update

Record
RHSA-2026:73425
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:73426 7.0

Red Hat Security Advisory: gdb security update

Record
RHSA-2026:73426
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:73427 7.0

Red Hat Security Advisory: gdb security update

Record
RHSA-2026:73427
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:82447 7.0

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:82447
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:73425 7.0

Important: gdb security update

The GNU Debugger (GDB) allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing their data.

Security Fix(es):

  • gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:73425
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:73426 7.0

Important: gdb security update

The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing out their data.

Security Fix(es):

  • gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:73426
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:73427 7.0

Important: gdb security update

The GNU Debugger (GDB) allows debugging of programs written in C, C++, and other languages by executing them in a controlled fashion and printing their data.

Security Fix(es):

  • gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:73427
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-13732 7.0

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
UBUNTU-CVE-2026-13732
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:73425 No score

Important: gdb security update

The GNU Debugger (GDB) allows debugging programs written in C, C++, Java, and
other languages by executing them in a controlled fashion and then printing
their data.

Security Fix(es):

  • gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Record
ALSA-2026:73425
Updated
2026-11-02
OSVALSA-2026:73426 No score

Important: gdb security update

The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java,
and other languages by executing them in a controlled fashion and then
printing out their data.

Security Fix(es):

  • gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Record
ALSA-2026:73426
Updated
2026-11-02
OSVALSA-2026:73427 No score

Important: gdb security update

The GNU Debugger (GDB) allows debugging of programs written in C, C++, and
other languages by executing them in a controlled fashion and printing their
data.

Security Fix(es):

  • gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Record
ALSA-2026:73427
Updated
2026-11-02
OSVAZL-98547 No score

CVE-2026-13732 affecting package crash 9.0.0-3

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
AZL-98547
Updated
2026-11-05
OSVAZL-98550 No score

CVE-2026-13732 affecting package gdb 13.2-11

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.

Record
AZL-98550
Updated
2026-11-05
OSVCLSA-2026-1791547259 No score

gdb: Fix of CVE-2026-13732

  • CVE-2026-13732: Fix out-of-bounds write in the STABS parser's read_member_functions(); the destructor/non-destructor split mis-updated the linked-list predecessor pointer, so destructors stayed in the list while the length counter was decremented, causing a negative-index write past the start of the member-function array when a crafted ELF with .stab/.stabstr sections was loaded.
Record
CLSA-2026-1791547259
Updated
2026-11-02
OSVCLSA-2026-1792625564 No score

gdb: Fix of CVE-2026-13732

  • CVE-2026-13732: fix out-of-bounds write in STABS parser read_member_functions()
Record
CLSA-2026-1792625564
Updated
2026-11-02
OSVopenSUSE-SU-2026:21890-1 No score

Security update for gdb

This update for gdb fixes the following issue:

  • CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
Record
openSUSE-SU-2026:21890-1
Updated
2026-11-02
OSVSUSE-SU-2026:23849-1 No score

Security update for gdb

This update for gdb fixes the following issue:

  • CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
Record
SUSE-SU-2026:23849-1
Updated
2026-11-02
OSVSUSE-SU-2026:4294-1 No score

Security update for gdb

This update for gdb fixes the following issue:

  • CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
Record
SUSE-SU-2026:4294-1
Updated
2026-11-02
OSVSUSE-SU-2026:4400-1 No score

Security update for gdb

This update for gdb fixes the following issue:

  • CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).
Record
SUSE-SU-2026:4400-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gdb
AlmaLinux:8
 before 8.2-20.1.el8_10
8.2-20.1.el8_10
gdb-doc
AlmaLinux:8
 before 8.2-20.1.el8_10
8.2-20.1.el8_10
gdb-gdbserver
AlmaLinux:8
 before 8.2-20.1.el8_10
8.2-20.1.el8_10
gdb-headless
AlmaLinux:8
 before 8.2-20.1.el8_10
8.2-20.1.el8_10
gdb
AlmaLinux:9
 before 16.3-3.1.el9_8
16.3-3.1.el9_8
gdb-doc
AlmaLinux:9
 before 16.3-3.1.el9_8
16.3-3.1.el9_8
gdb-gdbserver
AlmaLinux:9
 before 16.3-3.1.el9_8
16.3-3.1.el9_8
gdb-headless
AlmaLinux:9
 before 16.3-3.1.el9_8
16.3-3.1.el9_8
gdb-minimal
AlmaLinux:9
 before 16.3-3.1.el9_8
16.3-3.1.el9_8
gdb
AlmaLinux:10
 before 16.3-3.1.el10_2
16.3-3.1.el10_2
Show 80 moreShow less
Affected packages
PackageAffectedFixed
gdb-doc
AlmaLinux:10
 before 16.3-3.1.el10_2
16.3-3.1.el10_2
gdb-gdbserver
AlmaLinux:10
 before 16.3-3.1.el10_2
16.3-3.1.el10_2
gdb-headless
AlmaLinux:10
 before 16.3-3.1.el10_2
16.3-3.1.el10_2
gdb-minimal
AlmaLinux:10
 before 16.3-3.1.el10_2
16.3-3.1.el10_2
crash
Azure Linux:3
 through 9.0.0-3 None known
gdb
Azure Linux:3
 through 13.2-11 None known
gdb
Alpaquita:23
 12.1-r3 up to 12.1-r4
12.1-r4
gdb
Alpaquita:25
 15.2-r0 up to 15.2-r1
15.2-r1
gdb
Alpaquita:stream
 12.1-r3 up to 16.3-r5
16.3-r5
gdb
BellSoft Hardened Containers:23
 12.1-r3 up to 12.1-r4
12.1-r4
gdb
BellSoft Hardened Containers:25
 15.2-r0 up to 15.2-r1
15.2-r1
gdb
BellSoft Hardened Containers:stream
 12.1-r3 up to 16.3-r5
16.3-r5
gdb
TuxCare:AlmaLinux:9.2
 before 10.2-10.el9_2.tuxcare.els2
10.2-10.el9_2.tuxcare.els2
gdb-doc
TuxCare:AlmaLinux:9.2
 before 10.2-10.el9_2.tuxcare.els2
10.2-10.el9_2.tuxcare.els2
gdb-gdbserver
TuxCare:AlmaLinux:9.2
 before 10.2-10.el9_2.tuxcare.els2
10.2-10.el9_2.tuxcare.els2
gdb-headless
TuxCare:AlmaLinux:9.2
 before 10.2-10.el9_2.tuxcare.els2
10.2-10.el9_2.tuxcare.els2
gdb-minimal
TuxCare:AlmaLinux:9.2
 before 10.2-10.el9_2.tuxcare.els2
10.2-10.el9_2.tuxcare.els2
gdb
TuxCare:AlmaLinux:9.6
 before 14.2-4.1.el9_6.tuxcare.els1
14.2-4.1.el9_6.tuxcare.els1
gdb-doc
TuxCare:AlmaLinux:9.6
 before 14.2-4.1.el9_6.tuxcare.els1
14.2-4.1.el9_6.tuxcare.els1
gdb-gdbserver
TuxCare:AlmaLinux:9.6
 before 14.2-4.1.el9_6.tuxcare.els1
14.2-4.1.el9_6.tuxcare.els1
gdb-headless
TuxCare:AlmaLinux:9.6
 before 14.2-4.1.el9_6.tuxcare.els1
14.2-4.1.el9_6.tuxcare.els1
gdb-minimal
TuxCare:AlmaLinux:9.6
 before 14.2-4.1.el9_6.tuxcare.els1
14.2-4.1.el9_6.tuxcare.els1
gdb
Debian:12
 All versions, plus listed versions
13.1-313.2-113.2-1+hurd.315.1-115.2-1
Show 36 moreShow less
15.2-2~exp116.0.90.20250111-1~exp116.0.90.20250111-1~exp216.1-116.1-216.1-2+hurd.116.2-116.2-216.2-316.2-416.2-516.2-616.2-716.2-816.3-116.3-216.3-316.3-416.3-4~bpo13+116.3-4~bpo13+216.3-516.3-5~bpo13+117.0.50.20250905-1~exp117.0.90-1~exp117.0.90-1~exp217.1-117.1-1~bpo13+117.1-217.1-317.1-417.2-117.2-1~bpo13+118.1-118.1-218.1-318.1-3~bpo13+1
 None known
gdb
Debian:13
 All versions, plus listed versions
16.3-116.3-216.3-316.3-416.3-4~bpo13+1
Show 17 moreShow less
16.3-4~bpo13+216.3-516.3-5~bpo13+117.0.50.20250905-1~exp117.0.90-1~exp117.0.90-1~exp217.1-117.1-1~bpo13+117.1-217.1-317.1-417.2-117.2-1~bpo13+118.1-118.1-218.1-318.1-3~bpo13+1
 None known
gdb
Debian:14
 All versions, plus listed versions
16.3-116.3-216.3-316.3-416.3-4~bpo13+1
Show 17 moreShow less
16.3-4~bpo13+216.3-516.3-5~bpo13+117.0.50.20250905-1~exp117.0.90-1~exp117.0.90-1~exp217.1-117.1-1~bpo13+117.1-217.1-317.1-417.2-117.2-1~bpo13+118.1-118.1-218.1-318.1-3~bpo13+1
 None known
gdb
openEuler:22.03-LTS-SP4
 before 11.1-19.oe2203sp4
11.1-19.oe2203sp4
gdb
openEuler:24.03-LTS-SP1
 before 14.1-17.oe2403sp1
14.1-17.oe2403sp1
gdb
openEuler:24.03-LTS-SP3
 before 14.1-17.oe2403sp3
14.1-17.oe2403sp3
gdb
openEuler:24.03-LTS-SP4
 before 14.1-17.oe2403sp4
14.1-17.oe2403sp4
gdb
Red Hat:enterprise_linux:8::appstream
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb-doc
Red Hat:enterprise_linux:8::appstream
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb-gdbserver
Red Hat:enterprise_linux:8::appstream
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb-headless
Red Hat:enterprise_linux:8::appstream
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb-doc
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb-gdbserver
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb-headless
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb-minimal
Red Hat:enterprise_linux:9::appstream
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb-debugsource
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb-doc
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb-gdbserver
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb-headless
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb-minimal
Red Hat:enterprise_linux:10.2
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb
Red Hat:hummingbird:1
 before 0:17.2-6.2.hum1
0:17.2-6.2.hum1
gdb-doc
Red Hat:hummingbird:1
 before 0:17.2-6.2.hum1
0:17.2-6.2.hum1
gdb-gdbserver
Red Hat:hummingbird:1
 before 0:17.2-6.2.hum1
0:17.2-6.2.hum1
gdb-headless
Red Hat:hummingbird:1
 before 0:17.2-6.2.hum1
0:17.2-6.2.hum1
gdb-minimal
Red Hat:hummingbird:1
 before 0:17.2-6.2.hum1
0:17.2-6.2.hum1
gdb
Rocky Linux:8
 before 0:8.2-20.1.el8_10
0:8.2-20.1.el8_10
gdb
Rocky Linux:9
 before 0:16.3-3.1.el9_8
0:16.3-3.1.el9_8
gdb
Rocky Linux:10
 before 0:16.3-3.1.el10_2
0:16.3-3.1.el10_2
gdb
SUSE:Linux Micro Extras 6.2
 before 16.3-160000.6.1
16.3-160000.6.1
gdb
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 13.2-2.29.1
13.2-2.29.1
gdb
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 13.2-2.29.1
13.2-2.29.1
gdb
SUSE:Linux Enterprise Module for Development Tools 15 SP7
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 16.3-150400.15.32.1
16.3-150400.15.32.1
gdb
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
7.10-1ubuntu27.10-1ubuntu37.10.1-0ubuntu17.10.90.20160215-0ubuntu27.10.90.20160220-0ubuntu1
Show 4 moreShow less
7.11-0ubuntu17.11.1-0ubuntu1~16.047.11.1-0ubuntu1~16.57.11.1-0ubuntu1~16.5+esm1
 None known
gdb
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
8.0.1-0ubuntu18.0.1-0ubuntu28.0.1-0ubuntu38.1-0ubuntu18.1-0ubuntu2
Show 5 moreShow less
8.1-0ubuntu38.1-0ubuntu3.18.1-0ubuntu3.28.1.1-0ubuntu18.1.1-0ubuntu1+esm1
 None known
gdb
Ubuntu:20.04:LTS
 All versions, plus listed versions
8.3-0ubuntu19.0.50.20191019-0ubuntu19.0.50.20191119-0ubuntu19.0.90.20191216-0ubuntu19.0.90.20200105-0ubuntu1
Show 5 moreShow less
9.0.90.20200117-0ubuntu19.1-0ubuntu19.2-0ubuntu1~20.049.2-0ubuntu1~20.04.19.2-0ubuntu1~20.04.2
 None known
gdb
Ubuntu:22.04:LTS
 All versions, plus listed versions
11.1-0ubuntu211.1-0ubuntu311.2-0ubuntu112.0.50.20220217-0ubuntu112.0.90-0ubuntu112.1-0ubuntu1~22.0412.1-0ubuntu1~22.04.2
 None known
gdb
Ubuntu:24.04:LTS
 All versions, plus listed versions
14.0.50.20230907-0ubuntu114.1-0ubuntu114.1-0ubuntu215.0.50.20240219-0ubuntu115.0.50.20240320-0ubuntu115.0.50.20240403-0ubuntu115.1-1ubuntu1~24.04.1
 None known
gdb
Ubuntu:26.10
 All versions, plus listed versions
17.1-2ubuntu117.2-1ubuntu1
 None known
gdb
Ubuntu:26.04:LTS
 All versions, plus listed versions
16.3-1ubuntu216.3-5ubuntu117.1-1ubuntu117.1-1ubuntu217.1-2ubuntu1
 None known
gdb
openSUSE:Leap 16.0
 before 16.3-160000.6.1
16.3-160000.6.1
gdb-testresults
openSUSE:Leap 16.0
 before 16.3-160000.6.1
16.3-160000.6.1

History

History
RecordedChangedSources
factsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-13732 is a high vulnerability (CVSS 7.0) in Red Hat Cost Management On-premise 1, published August 31, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in gdb 8.2-20.1.el8_10.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open