Critical Out-of-Bounds Write Vulnerability in GDB Package
Summary
RLSA-2026:73426: Important: gdb security update. Affects gdb versions < 0:16.3-3.1.el9_8. Fixed in 0:16.3-3.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The GNU Debugger (GDB) is a powerful tool that allows developers to debug programs written in various programming languages, including C, C++, and Java. It enables users to execute programs in a controlled environment, inspect their state, and analyze their behavior. GDB is widely used in software development for troubleshooting and optimizing code. However, it is susceptible to security vulnerabilities that can compromise the integrity of the debugging process and the applications being debugged.
Vulnerability Detail
The vulnerability identified as CVE-2026-13732 is an out-of-bounds write issue found in the STABS parser's read_member_functions() function within GDB. This flaw can be exploited by an attacker through a crafted ELF (Executable and Linkable Format) file, potentially leading to unauthorized memory access, data corruption, or arbitrary code execution. The severity of this vulnerability is underscored by its CVSS score of 7.0, indicating a high risk to systems utilizing the affected version of GDB.
How To Fix
Minimum fixed version
0:16.3-3.1.el9_8
This is the first release that contains the fix.
sudo dnf update gdbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using GDB to debug potentially vulnerable ELF files until the package is updated. This precaution can help prevent exploitation of the vulnerability until a patch is applied.
Conclusion
The out-of-bounds write vulnerability in the GDB package poses significant risks to systems that utilize this debugging tool. Users are strongly advised to update to the patched version to mitigate potential exploitation. For those unable to update immediately, a temporary workaround is available to minimize risk.
See every vulnerability recorded for gdb →
FAQ
CVE-2026-13732 is a security vulnerability in the GDB package that allows for an out-of-bounds write, potentially leading to memory corruption or arbitrary code execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 7.0, indicating a high severity level.
If you cannot update GDB immediately, avoid debugging potentially vulnerable ELF files as a temporary workaround.
The Rocky Enterprise Software Foundation and Red Hat are responsible for addressing this vulnerability and providing the necessary updates.
Related vulnerabilities
Recent vulnerabilities recorded for gdb.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
