CVE-2023-39129

MediumCVSS 5.5

Published: 25/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

In version 13.0.50.20220805-git of GNU gdb (GDB), a heap use after free vulnerability was discovered in the add_pe_exported_sym() function in /gdb/coff-pe-read.c.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or remote code execution.

Recommendation

It is recommended to update to the latest version of GDB to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.