Every CVE Search/ Get API key

CVE-2026-24883

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success...

3.7 LowFix available

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.49%Up 0.5 points since Jan 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 3.7

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
CVE-2026-24883
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2026-4770 3.7

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
EUVD-2026-4770
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-7246-cvp4-g68w 3.7

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success...

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
GHSA-7246-cvp4-g68w
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-476
Updated
2026-11-02
NVD 3.7

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
CVE-2026-24883
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 3.7

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
CVE-2026-24883
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-476
Updated
2026-11-02
OSVDEBIAN-CVE-2026-24883 3.7

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
DEBIAN-CVE-2026-24883
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 6 moreShow less
OSVJLSEC-2026-566 5.5

In GnuPG before 2.5.17, a long signature packet length causes `parse_signature` to return success...

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Record
JLSEC-2026-566
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2026-0197 No score

Updated gnupg2 packages fix security vulnerabilities

CVE-2025-68973, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. CVE-2026-24882, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. CVE-2026-24883, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash). Upstream has still not fixed CVE-2025-68972. We will be tracking the solution and providing an update to fix it when possible.

Record
MGASA-2026-0197
Updated
2026-11-02
OSVopenSUSE-SU-2026:10112-1 No score

dirmngr-2.5.17-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.17-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10112-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20136-1 No score

Security update for gpg2

This update for gpg2 fixes the following issues:

  • CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396).
  • CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to return success with sig->data[] set to a NULL value (bsc#1257395).
  • gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field (bsc#1256389).
Record
openSUSE-SU-2026:20136-1
Updated
2026-11-02
OSVSUSE-SU-2026:20179-1 No score

Security update for gpg2

This update for gpg2 fixes the following issues:

  • CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396).
  • CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to return success with sig->data[] set to a NULL value (bsc#1257395).
  • gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field (bsc#1256389).
Record
SUSE-SU-2026:20179-1
Updated
2026-11-02
OSVSUSE-SU-2026:20195-1 No score

Security update for gpg2

This update for gpg2 fixes the following issues:

  • CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396).
  • CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to return success with sig->data[] set to a NULL value (bsc#1257395).
  • gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field (bsc#1256389).
Record
SUSE-SU-2026:20195-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
GnuPG_jll
Julia
 2.5.16+0 up to 2.5.17+0
2.5.17+0
gnupg2
Mageia:9
From an advisory covering 3 CVEs
 before 2.3.8-1.5.mga9
2.3.8-1.5.mga9
gpg2
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 2.5.5-160000.4.1
2.5.5-160000.4.1
gpg2
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 2.5.5-160000.4.1
2.5.5-160000.4.1
gpg2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 2.5.5-160000.4.1
2.5.5-160000.4.1
gpg2
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.5.17-1.1
2.5.17-1.1
gpg2
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 2.5.5-160000.4.1
2.5.5-160000.4.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-24883 is a low vulnerability (CVSS 3.7) in Gnupg, published January 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in GnuPG_jll 2.5.17+0.

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open