GnuPG vulnerabilities
We track 4 vulnerabilities in GnuPG products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest GnuPG vulnerabilities
- 9.8 Critical severity
GnuPG: Creation of Temporary File in Directory with Insecure Permissions
GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An atta
- 9.8 Critical severity
GnuPG: Stack-based Buffer Overflow
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however,
- 7.0 High severity
GnuPG: Out-of-bounds Write
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
- 9.8 Critical severity
libksba: Integer Overflow or Wraparound
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a maliciou