← Back

CVE-2026-41989

nvd nist
Published: Apr 23, 2026Modified: Oct 15, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.4 / Impact: 5.2
Source: MITRE (Secondary)

Description

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

Affected (3)

Products: Gnupg: Libgcrypt
Gnupg
1 product
Libgcrypt
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Gnupg
Libgcrypt
1.11.0 ≤ version < 1.11.3
Libgcrypt
1.12.0 ≤ version < 1.12.2
Libgcrypt
1.8.8 ≤ version < 1.10.4

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (6)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.