← Back

Gpgme

gpgme

Vendor: Gnu • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3564
3Canonical
DebianGnu
3Debian Linux
GpgmeUbuntu Linux
May 6, 2026
Oct 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute a...Show more
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."Show less
CVE-2007-1263
2Gnu
Gnupg
2Gnupg
Gpgme
Apr 23, 2026
Mar 6, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers...Show more
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.Show less