CVE-2026-121996
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Nov 05, 2026
Vendor
unknown
Description
A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeating ASLR in further exploitation.