Vulnerabilidades de Gnupg

CVE-2026-105712 Baixa · 3.6 CWE-61 05/10/2026

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive…

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk.

CVE-2026-57062 Baixa · 2.9 CWE-1284 23/06/2026

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles…

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

CVE-2026-41990 Média · 4.0 CWE-787 23/04/2026

Out-of-bounds Write em Gnupg Libgcrypt

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.

CVE-2026-41989 Média · 6.7 CWE-787 23/04/2026

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via...

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

CVE-2026-24883 Média · 5.5 CWE-476 27/01/2026

NULL Pointer Dereference em Gnupg

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

CVE-2026-24882 Alta · 7.8 CWE-121 27/01/2026

Stack-based Buffer Overflow em Gnupg

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

CVE-2026-24881 Crítica · 9.8 CWE-121 27/01/2026

GnuPG gpg-agent: estouro de buffer baseado em pilha na descriptografia CMS

No GnuPG anterior à 2.5.17, uma mensagem CMS (S/MIME) EnvelopedData elaborada que contém uma chave de sessão encapsulada superdimensionada pode causar um estouro de buffer baseado em pilha no gpg-agent durante o tratamento de PKDECRYPT--kem=CMS. Isso pode ser facilmente explorado para negação de serviço; porém, também há corrupção de memória que poderia levar à execução remota de código.

CVE-2025-68973 Alta · 7.0 CWE-787 28/12/2025

Out-of-bounds Write em Gnupg

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

CVE-2025-68972 Média · 4.7 CWE-347 27/12/2025

Improper Verification of Cryptographic Signature em Gnupg

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an "invalid armor" message is printed during verification). This is related to use of \f as a marker to denote truncation of a long plaintext line.

CVE-2021-33560 Alta · 7.5 CWE-203 08/06/2021

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

CVE-2019-12904 Média · 5.9 CWE-668 19/06/2019

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel...

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack

CVE-2018-0495 Média · 4.7 CWE-203 13/06/2018

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.