« List of all CVEs

CVE-2026-24882

Published: 1/27/2026 Last updated: 1/28/2026 Reserved: 1/27/2026

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 8.4 High CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Opam packages affected (1)

0install

Products affected (2)

Product Vendor Version
GnuPG GnuPG All versions prior to 23.11.5 LTS
GnuPG GnuPG < V4.3.8

References (4)