Sequoia-pgp Sequoia vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sequoia-pgp Sequoia: 1 record(s), with affected versions and fixes.
CVE-2025-67897
Medium · 5.3
CWE-195 Dec 14, 2025
In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short…
In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.