Approved changes feed: RSS · Atom
cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnupg (cf567c2a-c134-5510-af9f-62e22a797e74) |
|---|---|
| Product | Gnupg (4cf32d1a-56d5-5ea8-b76d-a28fa2edc257) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/gnupg |
purl2cpe | 2026-06-01 10:12:44.150337 |
pkg:deb/ubuntu/gnupg |
purl2cpe | 2026-06-01 10:12:44.150340 |
pkg:github/gpg/gnupg |
purl2cpe | 2026-06-01 10:12:44.150343 |
pkg:gnupg/gnupg |
purl2cpe | 2026-06-01 10:12:44.150346 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57062 |
vulnerable | 2026-07-29 01:00:29.363752 |
Details available
LOW (2.9)
CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.
Published: 2026-06-23T17:26:25.133Z
Updated: 2026-06-23T17:35:30.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24883 |
vulnerable | 2026-06-08 07:53:18.620552 |
Details available
LOW (3.7)
In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).
Published: 2026-01-27T18:43:18.883Z
Updated: 2026-01-28T15:52:11.076Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24882 |
vulnerable | 2026-06-08 07:53:18.619813 |
Details available
HIGH (8.4)
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
Published: 2026-01-27T18:40:18.166Z
Updated: 2026-07-15T01:16:43.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24881 |
vulnerable | 2026-06-08 07:53:18.617250 |
Details available
HIGH (8.1)
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution.
Published: 2026-01-27T18:36:56.727Z
Updated: 2026-07-15T01:16:45.277Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68973 |
vulnerable | 2026-06-08 07:41:21.999906 |
Details available
HIGH (7.8)
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
Published: 2025-12-28T16:19:11.019Z
Updated: 2026-04-30T03:55:53.604Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68972 |
vulnerable | 2026-06-08 07:41:21.998503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30258 |
vulnerable | 2026-06-08 07:16:59.343114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34903 |
vulnerable | 2026-06-08 05:46:03.993997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14855 |
vulnerable | 2026-06-08 05:12:56.275264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13050 |
vulnerable | 2026-06-08 05:12:40.815506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12020 |
vulnerable | 2026-06-08 05:10:39.722382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000858 |
vulnerable | 2026-06-08 05:10:26.131171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6313 |
vulnerable | 2026-06-08 05:07:59.456236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1607 |
vulnerable | 2026-06-08 05:06:25.922552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1606 |
vulnerable | 2026-06-08 05:06:25.922049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0837 |
vulnerable | 2026-06-08 05:06:24.005288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4617 |
vulnerable | 2026-06-08 05:05:45.246308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3591 |
vulnerable | 2026-06-08 05:05:33.640049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4576 |
vulnerable | 2026-06-08 05:04:48.302968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4242 |
vulnerable | 2026-06-08 05:04:34.801424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2207 |
vulnerable | 2026-06-08 04:58:04.832703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2547 |
vulnerable | 2026-06-08 04:55:08.659725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1263 |
vulnerable | 2026-06-08 04:49:41.902963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3082 |
vulnerable | 2026-06-08 04:49:08.276096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0366 |
vulnerable | 2026-06-08 04:48:12.466539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.