← Back

CVE-2026-41990

nvd nist
Published: Apr 23, 2026Modified: Apr 27, 2026

JSON object

Loading...
4.0
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Exploitability: 1.4 / Impact: 2.5
Source: MITRE (Secondary)

Description

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.

Affected (1)

Products: Gnupg: Libgcrypt
Gnupg
1 product
Libgcrypt
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libgcrypt
From 1.12.0 to 1.12.2

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Mailing ListRelease Notes
Source: cve@mitre.org
Mailing ListRelease Notes

Timeline

No history available yet.