← Back

CVE-2026-41989

nvd nist
Published: Apr 23, 2026Modified: Apr 27, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.4 / Impact: 5.2
Source: MITRE (Secondary)

Description

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

Affected (3)

Products: Gnupg: Libgcrypt
Gnupg
1 product
Libgcrypt
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Gnupg
Libgcrypt
From 1.11.0 to 1.11.3
Libgcrypt
From 1.12.0 to 1.12.2
Libgcrypt
From 1.8.8 to 1.10.4

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory

Timeline

No history available yet.