Every CVE Search/ Get API key

CVE-2026-57062

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...

2.9 LowPublic exploitFix available

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.14%Unchanged since Jun 24, 2026
90%50%10%1%

What each source reports

CVE List Score used 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
CVE-2026-57062
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-1284
Updated
2026-11-02
EUVDEUVD-2026-38550 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
EUVD-2026-38550
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-m6x2-4hhh-669j 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
GHSA-m6x2-4hhh-669j
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-1284
Updated
2026-11-02
NVD 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
CVE-2026-57062
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-1284
Updated
2026-11-02
OSVBELL-CVE-2026-57062 2.9
Record
BELL-CVE-2026-57062
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2026-57062 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
DEBIAN-CVE-2026-57062
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 17 moreShow less
OSVJLSEC-2026-1084 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
JLSEC-2026-1084
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2026-2858 2.9

gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories.

Security Fix(es):

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.(CVE-2026-57062)

Record
OESA-2026-2858
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2026-2859 2.9

gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories.

Security Fix(es):

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.(CVE-2026-57062)

Record
OESA-2026-2859
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2026-2860 2.9

gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories.

Security Fix(es):

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.(CVE-2026-57062)

Record
OESA-2026-2860
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:82418 2.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:82418
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-57062 2.9

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
UBUNTU-CVE-2026-57062
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVAZL-91170 No score

CVE-2026-57062 affecting package gnupg2 for versions less than 2.4.9-3

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Record
AZL-91170
Updated
2026-11-05
OSVCLSA-2026-1785557084 No score

gnupg2: Fix of CVE-2026-57062

  • CVE-2026-57062: require a minimum AES-GCM authentication tag length of 12 octets in gpgsm CMS decryption; a 4-octet aes-ICVlen was previously accepted, weakening the integrity guarantee of the message
Record
CLSA-2026-1785557084
Updated
2026-11-02
OSVCLSA-2026-1786609750 No score

gnupg2: Fix of CVE-2026-57062

  • CVE-2026-57062: require a minimum AES-GCM authentication tag length of 12 octets in gpgsm CMS decryption; a 4-octet aes-ICVlen was previously accepted, weakening the integrity guarantee of the message
Record
CLSA-2026-1786609750
Updated
2026-11-02
OSVopenSUSE-SU-2026:11213-1 No score

dirmngr-2.5.21-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.21-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11213-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21385-1 No score

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
Record
openSUSE-SU-2026:21385-1
Updated
2026-11-02
OSVSUSE-SU-2026:22757-1 No score

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
Record
SUSE-SU-2026:22757-1
Updated
2026-11-02
OSVSUSE-SU-2026:22825-1 No score

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
Record
SUSE-SU-2026:22825-1
Updated
2026-11-02
OSVSUSE-SU-2026:22923-1 No score

Security update for gpg2

This update for gpg2 fixes the following issue

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
Record
SUSE-SU-2026:22923-1
Updated
2026-11-02
OSVSUSE-SU-2026:23007-1 No score

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
Record
SUSE-SU-2026:23007-1
Updated
2026-11-02
OSVSUSE-SU-2026:3243-1 No score

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).
Record
SUSE-SU-2026:3243-1
Updated
2026-11-02
OSVUSN-8720-1 No score

gnupg2 vulnerability

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks.

Record
USN-8720-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gnupg2
Azure Linux:3
 before 2.4.9-3
2.4.9-3
gnupg
Alpaquita:23
 2.2.40-r0 up to 2.2.40-r2
2.2.40-r2
gnupg
Alpaquita:25
 2.4.7-r0 up to 2.4.9-r1
2.4.9-r1
gnupg
Alpaquita:stream
 2.4.0-r1 up to 2.4.9-r2
2.4.9-r2
gnupg2
TuxCare:AlmaLinux:9.2
 before 2.3.3-2.el9_0.tuxcare.els4
2.3.3-2.el9_0.tuxcare.els4
gnupg2-smime
TuxCare:AlmaLinux:9.2
 before 2.3.3-2.el9_0.tuxcare.els4
2.3.3-2.el9_0.tuxcare.els4
gnupg2
TuxCare:AlmaLinux:9.6
 before 2.3.3-4.el9_6.tuxcare.els5
2.3.3-4.el9_6.tuxcare.els5
gnupg2-smime
TuxCare:AlmaLinux:9.6
 before 2.3.3-4.el9_6.tuxcare.els5
2.3.3-4.el9_6.tuxcare.els5
gnupg2
Debian:12
 All versions, plus listed versions
2.2.40-1.12.2.40-1.1+deb12u12.2.40-1.1+deb12u22.2.40-1.1+hurd.12.2.40-1.1+loong64
Show 45 moreShow less
2.2.40-22.2.40-32.2.43-12.2.43-22.2.43-32.2.43-42.2.43-52.2.43-62.2.43-72.2.43-82.2.44-12.2.45-12.2.45-22.2.45-32.2.46-12.2.46-22.2.46-32.2.46-42.2.46-52.2.46-62.2.46~pre1-12.3.1-12.4.3-22.4.4-12.4.4-22.4.4-32.4.4-42.4.5-12.4.5-22.4.5-32.4.6-12.4.7-12.4.7-102.4.7-112.4.7-122.4.7-132.4.7-142.4.7-152.4.7-162.4.7-172.4.7-182.4.7-192.4.7-22.4.7-202.4.7-21
 None known
gnupg2
Debian:13
 All versions, plus listed versions
2.4.7-212.4.7-21+deb13u12.4.8-12.4.8-22.4.8-3
Show 10 moreShow less
2.4.8-42.4.8-52.4.8-62.4.9-12.4.9-22.4.9-32.4.9-42.4.9-52.4.9-62.4.9-7
 None known
Show 27 moreShow less
Affected packages
PackageAffectedFixed
gnupg2
Debian:14
 before 2.4.9-5, plus listed versions
2.4.7-212.4.8-12.4.8-22.4.8-32.4.8-4
Show 6 moreShow less
2.4.8-52.4.8-62.4.9-12.4.9-22.4.9-32.4.9-4
2.4.9-5
GnuPG_jll
Julia
 before 2.5.21+0
2.5.21+0
gnupg2
openEuler:24.03-LTS-SP1
 before 2.4.3-16.oe2403sp1
2.4.3-16.oe2403sp1
gnupg2
openEuler:24.03-LTS-SP3
 before 2.4.3-16.oe2403sp3
2.4.3-16.oe2403sp3
gnupg2
openEuler:22.03-LTS-SP4
 before 2.2.32-10.oe2203sp4
2.2.32-10.oe2203sp4
gnupg2
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-dirmngr
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-g13
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-gpg-agent
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-gpgconf
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-keyboxd
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-scdaemon
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-smime
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-utils
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-verify
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gnupg2-wks
Red Hat:hummingbird:1
 before 0:2.4.9-18.3.hum1
0:2.4.9-18.3.hum1
gpg2
SUSE:Linux Micro 6.2
 before 2.5.5-160000.6.1
2.5.5-160000.6.1
gpg2
SUSE:Linux Enterprise Server 16.0
 before 2.5.5-160000.6.1
2.5.5-160000.6.1
gpg2
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 2.5.5-160000.6.1
2.5.5-160000.6.1
gpg2
SUSE:Linux Micro 6.1
 before 2.4.4-slfo.1.1_9.1
2.4.4-slfo.1.1_9.1
gpg2
SUSE:Linux Micro 6.0
 before 2.4.4-9.1
2.4.4-9.1
gpg2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 2.4.4-150600.3.18.1
2.4.4-150600.3.18.1
gnupg2
Ubuntu:24.04:LTS
 before 2.4.4-2ubuntu17.6, plus listed versions
2.2.40-1.1ubuntu12.4.4-2ubuntu72.4.4-2ubuntu152.4.4-2ubuntu162.4.4-2ubuntu172.4.4-2ubuntu17.22.4.4-2ubuntu17.32.4.4-2ubuntu17.4
2.4.4-2ubuntu17.6
gnupg2
Ubuntu:25.10
 All versions, plus listed versions
2.4.4-2ubuntu232.4.4-2ubuntu242.4.7-17ubuntu32.4.8-2ubuntu12.4.8-2ubuntu22.4.8-2ubuntu2.1
 None known
gnupg2
Ubuntu:26.04:LTS
 before 2.4.8-4ubuntu3.1, plus listed versions
2.4.8-2ubuntu22.4.8-4ubuntu12.4.8-4ubuntu22.4.8-4ubuntu3
2.4.8-4ubuntu3.1
gpg2
openSUSE:Tumbleweed
 before 2.5.21-1.1
2.5.21-1.1
gpg2
openSUSE:Leap 16.0
 before 2.5.5-160000.6.1
2.5.5-160000.6.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubgoldendivider/gpgsm-cve-2026-57062-cms-gcm-short-tag2026-09-05

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-57062 is a low vulnerability (CVSS 2.9) in Gnupg, published June 23, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in gnupg2 2.4.9-3.

References

Show 21 moreShow less
This page doesn't list everything

Left out here: 20 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open