Gnupg Libgcrypt vulnerabilities

• gnupg libgcrypt Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds... CVE-2026-41990 Fix available 4.0 MediumApril 23, 2026
• gnupg libgcrypt, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via... CVE-2026-41989 Fix available 6.7 MediumApril 23, 2026
• gnupg libgcrypt The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during... CVE-2021-40528 Fix available 5.9 MediumJune 25, 2021
• gnupg libgcrypt, debian linux, fedoraproject fedora +8 more +10 more Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks... CVE-2021-33560 Public exploitFix available 7.5 HighJune 8, 2021
• gnupg libgcrypt, oracle communications billing and revenue management +1 more _gcry_md_block_write in cipher/hash-common.c in Libgcrypt before 1.9.1 has a heap-based buffer... CVE-2021-3345 Public exploit 7.8 HighJanuary 29, 2021
• gnupg libgcrypt, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel... CVE-2019-12904 Fix availableDisputed 5.9 MediumJune 19, 2019
• gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 more Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA... CVE-2018-0495 Fix available 4.7 MediumJune 13, 2018
• gnupg libgcrypt cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly... CVE-2018-6829 Fix available 7.5 HighFebruary 7, 2018
• gnupg libgcrypt, debian linux +1 more Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it... CVE-2017-0379 Fix available 7.5 HighAugust 29, 2017
• gnupg libgcrypt, canonical ubuntu linux, debian linux +2 more libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a... CVE-2017-7526 Fix available 6.1 MediumJune 29, 2017
• gnupg libgcrypt In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel... CVE-2017-9526 Fix available 5.9 MediumJune 10, 2017
• gnupg, gnupg libgcrypt, canonical ubuntu linux +1 more +3 more The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6... CVE-2016-6313 Fix available 5.3 MediumAugust 17, 2016
• gnupg libgcrypt, canonical ubuntu linux, debian linux +2 more Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during... CVE-2015-7511 Fix available 2.0 LowDecember 31, 2015
• gnu gnupg, libgcrypt, debian linux +2 more The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to... CVE-2015-0837 Fix available 5.9 MediumMarch 2, 2015
• gnu gnupg, libgcrypt, debian linux +2 more Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal... CVE-2014-3591 Fix available 4.2 MediumDecember 31, 2014
• gnupg libgcrypt, debian linux +1 more Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext... CVE-2014-5270 Fix available 2.1 LowAugust 18, 2014
• gnupg, gnupg libgcrypt, canonical ubuntu linux +2 more +4 more GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other... CVE-2013-4242 Fix available 1.9 LowJuly 29, 2013