Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-13732— Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

Quick assessment

Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GNU gdb是美国GNU基金会开源的一个程序调试工具。 GNU gdb 存在缓冲区错误漏洞，该漏洞源于GDB的STABS调试格式解析器中的read_member_functions函数（gdb/stabsread.c）存在链表删除错误，导致越界写入，攻击者可利用恶意ELF二进制文件触发，从而在GDB进程内执行任意命令。

CVSS 7.0 · High EPSS 0.13% · P3

Possible ATT&CK Techniques 1 AI

T1204 · User Execution

Affected Version Matrix 12

VendorProduct Version RangeStatus
Red Hat Red Hat Cost Management On-Premise 1 1791460851< * unaffected
Red Hat Red Hat Enterprise Linux 10 0:16.3-3.1.el10_2< * unaffected
Red Hat Red Hat Enterprise Linux 6 any affected
Red Hat Red Hat Enterprise Linux 7 any affected
Red Hat Red Hat Enterprise Linux 8 0:8.2-20.1.el8_10< * unaffected
Red Hat Red Hat Enterprise Linux 9 0:16.3-3.1.el9_8< * unaffected
Red Hat Red Hat Hardened Images 17.2-6.2.hum1< * unaffected
Red Hat Red Hat Update Infrastructure 5 1791978534< * unaffected
1791978528< * unaffected
1791978528< * unaffected
1791964013< * unaffected
1791978693< * unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-13732

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main function list while the list length counter is decremented, resulting in an out-of-bounds write when the function list is copied to its final allocated array. An attacker can craft an ELF binary with malicious .stab and .stabstr sections that triggers this out-of-bounds write when a user opens the file in GDB and performs any symbol-inspection operation such as setting a breakpoint. The inferior process does not need to be executed. Under controlled conditions, this was demonstrated to achieve execution of arbitrary commands within the GDB process.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
GNU gdb 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU gdb是美国GNU基金会开源的一个程序调试工具。 GNU gdb 存在缓冲区错误漏洞，该漏洞源于GDB的STABS调试格式解析器中的read_member_functions函数（gdb/stabsread.c）存在链表删除错误，导致越界写入，攻击者可利用恶意ELF二进制文件触发，从而在GDB进程内执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat Enterprise Linux 10 0:16.3-3.1.el10_2 ~ * cpe:/o:redhat:enterprise_linux:10.2
Red Hat Red Hat Enterprise Linux 8 0:8.2-20.1.el8_10 ~ * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat Red Hat Enterprise Linux 9 0:16.3-3.1.el9_8 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat Red Hat Cost Management On-Premise 1 1791460851 ~ * cpe:/a:redhat:cost_management_on_premise:1::el10
Red Hat Red Hat Hardened Images 17.2-6.2.hum1 ~ * cpe:/a:redhat:hummingbird:1
Red Hat Red Hat Update Infrastructure 5 1791978534 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1791978528 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1791978528 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1791964013 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1791978693 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Enterprise Linux 6 - cpe:/o:redhat:enterprise_linux:6
Red Hat Red Hat Enterprise Linux 7 - cpe:/o:redhat:enterprise_linux:7

II. Public POCs for CVE-2026-13732

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-13732

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-13732 (8)

Same Patch Batch · Red Hat · 2026-08-31 · 4 CVEs total

CVE-2026-17615 7.5 HIGH Resteasy-core: resteasy sourceprovider remote unauthenticated file read
CVE-2026-76763 7.5 HIGH Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via larg
CVE-2026-81624 7.5 HIGH Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 10
Same vendor: Red Hat
Same weakness: CWE-787

V. Comments for CVE-2026-13732

No comments yet

Leave a comment