CVE Catalog

CVE-2023-39130

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.23%

13th percentile - higher than 13% of all known CVEs

Summary

In version 13.0.50.20220805-git of GNU gdb (GDB), a heap buffer overflow was discovered in the function pe_as16() in the file /gdb/coff-pe-read.c.

Risk Assessment

Heap buffer overflow can lead to arbitrary code execution, posing a serious security risk to the system.

Recommendation

It is recommended to update GDB to the latest version to mitigate this vulnerability.

Original NVD description (English source)

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS