In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnupg2Upgrade gnupg2-smime | Jan 19, 2026 | Jan 15, 2026 |
| Alpine Linux | — | Upgrade gnupg | Jan 5, 2026 | Dec 28, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gnupg2-smimeUpgrade gnupg2Upgrade gnupg2-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gnupg2-smimeUpgrade gnupg2-debugsourceUpgrade gnupg2-debuginfoUpgrade gnupg2-minimalUpgrade gnupg2Upgrade gnupg2-smime-debuginfoUpgrade gnupg2-minimal-debuginfo | Feb 10, 2026 | Dec 28, 2025 |
| Debian | — | Upgrade gnupg2 | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnupg2 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnupg2 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gnupg2 | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | May 12, 2026 |
| Oracle_linux | — | Upgrade gnupg2-smimeUpgrade gnupg2 | Jan 19, 2026 | Dec 28, 2025 |
| Redhat_linux | — | Upgrade gnupg2-smime-debuginfoUpgrade gnupg2-debugsourceUpgrade gnupg2Upgrade gnupg2-smimeNo solution existsUpgrade gnupg2-debuginfo | Jan 16, 2026 | Dec 28, 2025 |
| Rocky_linux | — | Upgrade gnupg2-debuginfoUpgrade gnupg2-debugsourceUpgrade gnupg2-smime-debuginfoUpgrade gnupg2Upgrade gnupg2-smime | Jan 19, 2026 | Jan 17, 2026 |
| Ubuntu | — | Upgrade gpg (Ubuntu Pro)Upgrade gnupg (Ubuntu Pro)Upgrade gnupg2 (Ubuntu Pro)Upgrade gnupg2Upgrade gpgUpgrade gpgv2 (Ubuntu Pro)Upgrade gpgv (Ubuntu Pro)Upgrade gnupg | Jan 9, 2026 | Dec 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub