{"id":"CVE-2026-13732","aliases":["ALSA-2026:73425","ALSA-2026:73426","ALSA-2026:73427","AZL-98547","AZL-98550","BELL-CVE-2026-13732","CLSA-2026-1791547259","CLSA-2026-1792625564","DEBIAN-CVE-2026-13732","EUVD-2026-68746","GHSA-j2fm-9w3c-hpj9","OESA-2026-4505","OESA-2026-4506","OESA-2026-4507","OESA-2026-4508","RHSA-2026:73425","RHSA-2026:73426","RHSA-2026:73427","RHSA-2026:82447","RLSA-2026:73425","RLSA-2026:73426","RLSA-2026:73427","SUSE-SU-2026:23849-1","SUSE-SU-2026:4294-1","SUSE-SU-2026:4400-1","UBUNTU-CVE-2026-13732","openSUSE-SU-2026:12483-1","openSUSE-SU-2026:21890-1"],"status":"published","title":"Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00144,"percentile":0.03716,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-08-31T19:23:18Z","modified":"2026-11-09T13:30:03Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"gdb","fixed_in":["8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gdb-doc","fixed_in":["8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gdb-gdbserver","fixed_in":["8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gdb-headless","fixed_in":["8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gdb","fixed_in":["16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gdb-doc","fixed_in":["16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gdb-gdbserver","fixed_in":["16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gdb-headless","fixed_in":["16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gdb-minimal","fixed_in":["16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gdb","fixed_in":["16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gdb-doc","fixed_in":["16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gdb-gdbserver","fixed_in":["16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gdb-headless","fixed_in":["16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gdb-minimal","fixed_in":["16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gdb","fixed_in":["12.1-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"gdb","fixed_in":["15.2-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gdb","fixed_in":["16.3-r5"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"gdb","fixed_in":["12.1-r4"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"gdb","fixed_in":["15.2-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"gdb","fixed_in":["16.3-r5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb","fixed_in":["10.2-10.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-doc","fixed_in":["10.2-10.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-gdbserver","fixed_in":["10.2-10.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-headless","fixed_in":["10.2-10.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-minimal","fixed_in":["10.2-10.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb","fixed_in":["14.2-4.1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-doc","fixed_in":["14.2-4.1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-gdbserver","fixed_in":["14.2-4.1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-headless","fixed_in":["14.2-4.1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-minimal","fixed_in":["14.2-4.1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"gdb","fixed_in":["11.1-19.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"gdb","fixed_in":["14.1-17.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"gdb","fixed_in":["14.1-17.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"gdb","fixed_in":["14.1-17.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-debuginfo","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-debugsource","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-doc","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-gdbserver","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-headless","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-debuginfo","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-debugsource","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-doc","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-gdbserver","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-headless","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-minimal","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-debuginfo","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-debugsource","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-doc","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-gdbserver","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-headless","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-minimal","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"gdb","fixed_in":["0:17.2-6.2.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"gdb-doc","fixed_in":["0:17.2-6.2.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"gdb-gdbserver","fixed_in":["0:17.2-6.2.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"gdb-headless","fixed_in":["0:17.2-6.2.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"gdb-minimal","fixed_in":["0:17.2-6.2.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gdb","fixed_in":["0:8.2-20.1.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"gdb","fixed_in":["0:16.3-3.1.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"gdb","fixed_in":["0:16.3-3.1.el10_2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro Extras 6.2","package":"gdb","fixed_in":["16.3-160000.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gdb","fixed_in":["13.2-2.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gdb","fixed_in":["13.2-2.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"gdb","fixed_in":["16.3-150400.15.32.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gdb","fixed_in":["17.2-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"gdb","fixed_in":["16.3-160000.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"gdb-testresults","fixed_in":["16.3-160000.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"crash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"9.0.0-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"13.2-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.1-r3"},{"fixed":"12.1-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2-r0"},{"fixed":"15.2-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.1-r3"},{"fixed":"16.3-r5"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.1-r3"},{"fixed":"12.1-r4"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.2-r0"},{"fixed":"15.2-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.1-r3"},{"fixed":"16.3-r5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2-10.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2-10.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2-10.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2-10.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2-10.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2-4.1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2-4.1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2-4.1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2-4.1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2-4.1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13.1-3","13.2-1","13.2-1+hurd.3","15.1-1","15.2-1","15.2-2~exp1","16.0.90.20250111-1~exp1","16.0.90.20250111-1~exp2","16.1-1","16.1-2","16.1-2+hurd.1","16.2-1","16.2-2","16.2-3","16.2-4","16.2-5","16.2-6","16.2-7","16.2-8","16.3-1","16.3-2","16.3-3","16.3-4","16.3-4~bpo13+1","16.3-4~bpo13+2","16.3-5","16.3-5~bpo13+1","17.0.50.20250905-1~exp1","17.0.90-1~exp1","17.0.90-1~exp2","17.1-1","17.1-1~bpo13+1","17.1-2","17.1-3","17.1-4","17.2-1","17.2-1~bpo13+1","18.1-1","18.1-2","18.1-3","18.1-3~bpo13+1"]},{"source":"osv","ecosystem":"Debian:13","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.3-1","16.3-2","16.3-3","16.3-4","16.3-4~bpo13+1","16.3-4~bpo13+2","16.3-5","16.3-5~bpo13+1","17.0.50.20250905-1~exp1","17.0.90-1~exp1","17.0.90-1~exp2","17.1-1","17.1-1~bpo13+1","17.1-2","17.1-3","17.1-4","17.2-1","17.2-1~bpo13+1","18.1-1","18.1-2","18.1-3","18.1-3~bpo13+1"]},{"source":"osv","ecosystem":"Debian:14","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.3-1","16.3-2","16.3-3","16.3-4","16.3-4~bpo13+1","16.3-4~bpo13+2","16.3-5","16.3-5~bpo13+1","17.0.50.20250905-1~exp1","17.0.90-1~exp1","17.0.90-1~exp2","17.1-1","17.1-1~bpo13+1","17.1-2","17.1-3","17.1-4","17.2-1","17.2-1~bpo13+1","18.1-1","18.1-2","18.1-3","18.1-3~bpo13+1"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-19.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-17.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-17.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-17.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.2-6.2.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gdb-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.2-6.2.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gdb-gdbserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.2-6.2.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gdb-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.2-6.2.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"gdb-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.2-6.2.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-20.1.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.3-3.1.el10_2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-160000.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-2.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-2.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-150400.15.32.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.10-1ubuntu2","7.10-1ubuntu3","7.10.1-0ubuntu1","7.10.90.20160215-0ubuntu2","7.10.90.20160220-0ubuntu1","7.11-0ubuntu1","7.11.1-0ubuntu1~16.04","7.11.1-0ubuntu1~16.5","7.11.1-0ubuntu1~16.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0.1-0ubuntu1","8.0.1-0ubuntu2","8.0.1-0ubuntu3","8.1-0ubuntu1","8.1-0ubuntu2","8.1-0ubuntu3","8.1-0ubuntu3.1","8.1-0ubuntu3.2","8.1.1-0ubuntu1","8.1.1-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.3-0ubuntu1","9.0.50.20191019-0ubuntu1","9.0.50.20191119-0ubuntu1","9.0.90.20191216-0ubuntu1","9.0.90.20200105-0ubuntu1","9.0.90.20200117-0ubuntu1","9.1-0ubuntu1","9.2-0ubuntu1~20.04","9.2-0ubuntu1~20.04.1","9.2-0ubuntu1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.1-0ubuntu2","11.1-0ubuntu3","11.2-0ubuntu1","12.0.50.20220217-0ubuntu1","12.0.90-0ubuntu1","12.1-0ubuntu1~22.04","12.1-0ubuntu1~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["14.0.50.20230907-0ubuntu1","14.1-0ubuntu1","14.1-0ubuntu2","15.0.50.20240219-0ubuntu1","15.0.50.20240320-0ubuntu1","15.0.50.20240403-0ubuntu1","15.1-1ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.1-2ubuntu1","17.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.3-1ubuntu2","16.3-5ubuntu1","17.1-1ubuntu1","17.1-1ubuntu2","17.1-2ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-160000.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gdb-testresults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3-160000.6.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat cost management on-premise 1"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat update infrastructure 5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:73425","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73426","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:73427","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79357","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82447","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82939","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96095","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96096","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96097","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96098","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-13732","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494416","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13732","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-j2fm-9w3c-hpj9"},{"url":"https://errata.almalinux.org/8/ALSA-2026-73425.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-73426.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-73427.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-13732","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791547259.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792625564.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-13732","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4505","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4506","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4507","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4508","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73425.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-13732","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73426.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73427.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82447.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73425","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73426","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:73427","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623849-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1277757","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13732","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264294-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264400-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-13732","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-13732","title":"Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","status":"published","published":"2026-08-31T19:23:18.741Z","modified":"2026-11-09T05:19:17.236Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-09T06:31:51.385806Z"}],"euvd":[{"id":"EUVD-2026-68746","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","status":"published","published":"2026-08-31T19:23:18Z","modified":"2026-11-09T05:19:17Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-09T06:15:17.534424Z"}],"ghsa":[{"id":"GHSA-j2fm-9w3c-hpj9","title":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb...","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","status":"published","published":"2026-08-31T21:32:10Z","modified":"2026-11-09T06:30:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-09T06:46:20.574784Z"}],"nvd":[{"id":"CVE-2026-13732","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","status":"published","published":"2026-08-31T20:17:02.18Z","modified":"2026-11-09T06:17:58.65Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-09T12:13:55.770499Z"}],"osv":[{"id":"BELL-CVE-2026-13732","status":"published","published":"2026-09-03T06:05:20.68746Z","modified":"2026-09-12T07:15:05.071489742Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"DEBIAN-CVE-2026-13732","description":"A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.","status":"published","published":"2026-08-31T20:17:02.18Z","modified":"2026-11-09T09:47:30.971471884Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-09T10:23:19.768736Z"},{"id":"OESA-2026-4505","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GDB\u0026apos;s STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)","status":"published","published":"2026-10-22T14:35:56Z","modified":"2026-10-22T14:45:10.486931572Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4506","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GDB\u0026apos;s STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)","status":"published","published":"2026-10-22T14:35:57Z","modified":"2026-10-22T14:45:11.084663788Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4507","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GDB\u0026apos;s STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)","status":"published","published":"2026-10-22T14:35:58Z","modified":"2026-10-22T14:45:09.84108935Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4508","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GDB\u0026apos;s STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.(CVE-2026-13732)","status":"published","published":"2026-10-22T14:35:59Z","modified":"2026-10-22T14:45:07.178537628Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:73425","title":"Red Hat Security Advisory: gdb security update","status":"published","published":"2026-09-30T10:17:58Z","modified":"2026-10-15T10:26:23Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73426","title":"Red Hat Security Advisory: gdb security update","status":"published","published":"2026-09-30T10:17:58Z","modified":"2026-10-15T10:26:24Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:73427","title":"Red Hat Security Advisory: gdb security update","status":"published","published":"2026-09-30T10:17:59Z","modified":"2026-10-15T10:26:24Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:82447","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-10-14T10:32:52Z","modified":"2026-10-15T10:28:37Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:73425","title":"Important: gdb security update","description":"The GNU Debugger (GDB) allows debugging programs written in C, C++, Java, and\nother languages by executing them in a controlled fashion and then printing\ntheir data.\n\nSecurity Fix(es):\n\n* gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.","status":"published","published":"2026-09-30T06:01:42.339396Z","modified":"2026-09-30T06:45:02.644088712Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:73426","title":"Important: gdb security update","description":"The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java,\nand other languages by executing them in a controlled fashion and then\nprinting out their data.\n\nSecurity Fix(es):\n\n* gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.","status":"published","published":"2026-09-30T12:05:19.277561Z","modified":"2026-09-30T12:45:02.351085046Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:73427","title":"Important: gdb security update","description":"The GNU Debugger (GDB) allows debugging of programs written in C, C++, and\nother languages by executing them in a controlled fashion and printing their\ndata.\n\nSecurity Fix(es):\n\n* gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.","status":"published","published":"2026-09-30T12:10:38.243683Z","modified":"2026-09-30T12:45:02.787521639Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-13732","description":"A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.","status":"published","published":"2026-08-31T20:17:00Z","modified":"2026-10-17T12:58:05.143047729Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"ALSA-2026:73425","title":"Important: gdb security update","description":"The GNU Debugger (GDB) allows debugging programs written in C, C++, Java, and  \nother languages by executing them in a controlled fashion and then printing  \ntheir data.  \n\nSecurity Fix(es):  \n\n  * gdb: STABS debug format parser out-of-bounds write via crafted ELF binary (CVE-2026-13732)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE  \npage(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:02:29.707628573Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:73426","title":"Important: gdb security update","description":"The GNU Debugger (GDB) allows you to debug programs written in C, C++, Java,  \nand other languages by executing them in a controlled fashion and then  \nprinting out their data.  \n\nSecurity Fix(es):  \n\n  * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE  \npage(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:32:37.51408515Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:73427","title":"Important: gdb security update","description":"The GNU Debugger (GDB) allows debugging of programs written in C, C++, and  \nother languages by executing them in a controlled fashion and printing their  \ndata.  \n\nSecurity Fix(es):  \n\n  * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (CVE-2026-13732)\n\n\nFor more details about the security issue(s), including the impact, a CVSS  \nscore, acknowledgments, and other related information, refer to the CVE  \npage(s) listed in the References section.\n","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-29T11:30:08.507094483Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-98547","title":"CVE-2026-13732 affecting package crash 9.0.0-3","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","status":"published","published":"2026-08-31T20:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.480138Z"},{"id":"AZL-98550","title":"CVE-2026-13732 affecting package gdb 13.2-11","description":"A flaw was found in GDB's STABS debug format parser. The\nread_member_functions() function in gdb/stabsread.c contains a linked\nlist removal bug in the code that separates destructor and non-destructor\nmember functions of C++ classes. The bug causes the destructor entries to\nremain in the main function list while the list length counter is\ndecremented, resulting in an out-of-bounds write when the function list\nis copied to its final allocated array. An attacker can craft an ELF\nbinary with malicious .stab and .stabstr sections that triggers this\nout-of-bounds write when a user opens the file in GDB and performs any\nsymbol-inspection operation such as setting a breakpoint. The inferior\nprocess does not need to be executed. Under controlled conditions, this\nwas demonstrated to achieve execution of arbitrary commands within the\nGDB process.","status":"published","published":"2026-08-31T20:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.480138Z"},{"id":"CLSA-2026-1791547259","title":"gdb: Fix of CVE-2026-13732","description":"- CVE-2026-13732: Fix out-of-bounds write in the STABS parser's\n  read_member_functions(); the destructor/non-destructor split mis-updated the\n  linked-list predecessor pointer, so destructors stayed in the list while the\n  length counter was decremented, causing a negative-index write past the start\n  of the member-function array when a crafted ELF with .stab/.stabstr sections\n  was loaded.","status":"published","published":"2026-10-09T12:01:10Z","modified":"2026-10-26T09:30:08.084522941Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792625564","title":"gdb: Fix of CVE-2026-13732","description":"- CVE-2026-13732: fix out-of-bounds write in STABS parser\n  read_member_functions()","status":"published","published":"2026-10-21T23:32:54Z","modified":"2026-10-26T09:31:36.599508493Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"openSUSE-SU-2026:12483-1","title":"gdb-17.2-1.1 on GA media","description":"These are all security issues fixed in the gdb-17.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-08T00:00:00Z","modified":"2026-11-09T13:30:03.333785285Z","updated_at":"2026-11-09T14:01:18.614326Z"},{"id":"openSUSE-SU-2026:21890-1","title":"Security update for gdb","description":"This update for gdb fixes the following issue:\n\n- CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).\n","status":"published","published":"2026-09-20T13:35:40Z","modified":"2026-09-25T18:23:11.531800151Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23849-1","title":"Security update for gdb","description":"This update for gdb fixes the following issue:\n\n- CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).\n","status":"published","published":"2026-09-20T13:53:47Z","modified":"2026-09-23T18:23:08.953465604Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4294-1","title":"Security update for gdb","description":"This update for gdb fixes the following issue:\n\n- CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).\n","status":"published","published":"2026-09-23T07:56:22Z","modified":"2026-09-23T18:15:03.518836048Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4400-1","title":"Security update for gdb","description":"This update for gdb fixes the following issue:\n\n- CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).\n","status":"published","published":"2026-09-30T08:55:49Z","modified":"2026-10-01T11:15:05.091405925Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}