GnuTLS vulnerabilities
We track 3 vulnerabilities in GnuTLS products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.
Latest GnuTLS vulnerabilities
- 7.5 High severity
libtasn1: Out-of-bounds Write
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
- 7.4 High severity
gnutls: Observable Discrepancy
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful
- 7.5 High severity
GnuTLS: Double Free
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.