AZL-113125
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113125.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-113125
- Upstream
- CVE-2026-121997
- Published
- 2026-11-05T17:18:01Z
- Modified
- 2026-11-13T06:04:48Z
- Summary
- CVE-2026-121997 affecting package crash 9.0.0-3
- Details
-
A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to write beyond the allocated heap buffer.
- References