Advisories · Technology
GnuPG.
Every CVE that names GnuPG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
CVE-2026-118131
- GnuPG
- Broken access control
- CWE-379
- CVSS 3.6 Low
gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive.
- GnuPG
- CWE-61
- CVSS 2.9 Low
GnuPG: CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles…
- GnuPG
- CWE-1284
- CVSS 3.7 Low
NULL pointer dereference in GnuPG
- GnuPG
- Memory corruption
- CVSS 8.4 High
Stack-based buffer overflow in GnuPG
- GnuPG
- Memory corruption
- CVSS 8.1 High
Stack-based buffer overflow in GnuPG
- GnuPG
- Memory corruption
- CVSS 7.8 High
GnuPG: In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index…
- GnuPG
- CWE-675
- CVSS 5.9 Medium
Improper signature verification in GnuPG
- GnuPG
- Weak cryptography or TLS
- CVSS 2.7 Low
Improper check for unusual conditions in GnuPG
- GnuPG
- CWE-754
- CVSS 3.3 Low
Out-of-bounds write in gnupg
- gnupg
- Memory corruption
-
GNU Libgcrypt: The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers…
- GNU Libgcrypt
- GnuPG
-
GNU Libgcrypt: Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for…
- GNU Libgcrypt
- GnuPG