CVE-2023-39130 GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in GNU gdb 13.0.50 Three vulnerabilities were identified in GNU gdb version 13.0.50. CVE-2023-39128 involves a stack overflow, CVE-2023-39129 is a heap use after free, and CVE-2023-39130 is a heap buffer overflow. All three CVEs were published on July 25, 2023, affecting users of this debugging tool. 3 sources 49