CVE-2026-121996 in Red Hat
Summary
by MITRE • 11/05/2026
A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeating ASLR in further exploitation.
Once again VulDB remains the best source for vulnerability data.