Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mitre

Description

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gnupg Libgcrypt

Default version status: unaffected

  • 1.8.8 to < 1.10.4affected
  • 1.11.0 to < 1.11.3affected
  • 1.12.0 to < 1.12.2affected

References