CVE-2026-41989

Mô tả

Tham khảo

• dev.gnupg.org/T8211 · Broken Link
• lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html · Third Party Advisory
• openwall.com/lists/oss-security/2026/04/21/1 · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-019113.html
• cert-portal.siemens.com/productcert/html/ssa-082556.html
• cert-portal.siemens.com/productcert/html/ssa-457936.html

Lỗ hổng khác của libgcrypt

• CVE-2026-41990TRUNG BÌNH 4.0Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
• CVE-2021-40528TRUNG BÌNH 5.9The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic librari…
• CVE-2021-33560CAO 7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att…
• CVE-2021-3345CAO 7.8_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets…
• CVE-2015-0837TRUNG BÌNH 5.9The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timin…