GN
Product
GnuPG
38
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 9Medium 10Low 3
Watch
Add GnuPG to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24881 | 9.8 | Jan 27 | In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during… Affected: 2.5.13 before 2.5.17 |
| CVE-2022-3515 | 9.8 | Jan 12 | A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser Affected: 2.1.0 before 2.2.41; 2.3.0 before 2.4.0 |
| CVE-2018-1000858 | 8.8 | Dec 20 | GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS Affected: 2.1.12 through 2.2.11 |
| CVE-2010-2547 | 8.1 | Aug 5 | Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Affected: 2.0.0 through 2.0.16 |
| CVE-2026-24882 | 7.8 | Jan 27 | In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys Affected: before 2.5.17 |
| CVE-2020-25125 | 7.8 | Sep 3 | GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and… Affected: 2.2.21; 2.2.22 |
| CVE-2019-14855 | 7.5 | Mar 20 | A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm Affected: before 2.2.18 |
| CVE-2019-13050 | 7.5 | Jun 29 | Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line… Affected: through 2.2.16 |
| CVE-2018-12020 | 7.5 | Jun 8 | mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on… Affected: before 2.2.8 |
| CVE-2018-9234 | 7.5 | Apr 4 | GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that… Affected: 2.2.4; 2.2.5 |
| CVE-2025-68973 | 7.0 | Dec 28 | In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input Affected: before 2.2.51; 2.3.0 before 2.4.9 |
| CVE-2022-34903 | 6.5 | Jul 1 | GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met,… Affected: through 2.3.6 |
| CVE-2015-0837 | 5.9 | Nov 29 | The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a… Affected: before 1.4.19 |
| CVE-2026-24883 | 5.5 | Jan 27 | In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application… Affected: 2.5.3 before 2.5.17 |
| CVE-2015-1607 | 5.5 | Nov 20 | kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a… Affected: before 1.4.19; 2.0 before 2.0.27; 2.1.0 before 2.1.2 |
| CVE-2015-1606 | 5.5 | Nov 20 | The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and use-after-free) via a… Affected: before 2.1.2 |
| CVE-2011-2207 | 5.3 | Nov 27 | dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate Affected: before 2.1.0 |
| CVE-2016-6313 | 5.3 | Dec 13 | The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to… Affected: through 1.4.14 |
| CVE-2025-68972 | 4.7 | Dec 27 | In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed… Affected: through 2.4.8 |
| CVE-2025-30258 | 4.7 | Mar 19 | In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the… Affected: before 2.4.8; 2.5.0 before 2.5.5 |
| CVE-2014-3591 | 4.2 | Nov 29 | Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's… Affected: before 1.4.19 |
| CVE-2026-105712 | 3.6 | Oct 5 | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive Affected: before 2.5.19 |
| CVE-2022-3219 | 3.3 | Feb 23 | GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB Affected: All versions, or not specified |
| CVE-2026-57062 | 2.9 | Jun 23 | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is… Affected: through 2.5.20 |
| CVE-2026-118131 New | – | Oct 27 | GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of… Affected: 2.5.21 |
| CVE-2014-9087 | – | Dec 1 | Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a… Affected: 2.1.0; 2.1.0 |
| CVE-2014-4617 | – | Jun 25 | The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via… Affected: 2.0; 2.0.1; 2.0.3; 2.0.4; 2.0.5; 2.0.6; +34 more |
| CVE-2013-4576 | – | Dec 20 | GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to… Affected: through 1.4.15; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2013-4402 | – | Oct 28 | The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP… Affected: 1.4.0; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.8; +19 more |
| CVE-2013-4351 | – | Oct 10 | GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote… Affected: 1.4.0; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.6; +24 more |
| CVE-2013-4242 | – | Aug 19 | GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack… Affected: through 1.4.13; 0.0.0; 0.2.15; 0.2.16; 0.2.17; 0.2.18; +34 more |
| CVE-2012-6085 | – | Jan 24 | The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database… Affected: 1.4.0; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.8; +21 more |
| CVE-2008-1530 | – | Mar 27 | GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key… Affected: 1.4.8; 2.0.8 |
| CVE-2007-1263 | – | Mar 6 | GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple… Affected: through 1.4.6 |
| CVE-2006-6169 | – | Nov 29 | Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code… Affected: 1.4; 2.0 |
| CVE-2006-3746 | – | Jul 28 | Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message Affected: 1.4.4 |
| CVE-2006-3082 | – | Jun 19 | parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message… Affected: through 1.9.20; 1.4.3 |
| CVE-2005-0366 | – | May 2 | The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a… Affected: before 1.4.1 |
Showing 38