CyberSecBulletin

Rpgp vulnerabilities

We track 2 vulnerabilities in Rpgp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Rpgp vulnerabilities

  • 7.5 High severity

    rpgp: Allocation of Resources Without Limits or Throttling

    CVE-2024-53857Rpgp

    rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows attackers to trigger resource exhaustion vulnerabilities in rpgp by providing crafted messages. This affects general message parsing and decryption with symmetric keys.

  • 7.5 High severity

    rpgp: Improper Handling of Length Parameter Inconsistency

    CVE-2024-53856Rpgp

    rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.