Report feedback

Under certain conditions, an unauthenticated local attacker can perform a DoS attack or corrupt data in memory, and potentially execute code with the privileges of the tpm2daemon process, by sending a specially crafted ciphertext. Systems that use a Trusted Platform Module (TPM) to store private keys are vulnerable, and both cryptographic paths - RSA and ECC - are affected [1][4]. Detailed information about the vulnerability can be found at [1][5].

The vulnerability is present in product:

• GnuPG; <2.5.17;

CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2026-24882 at cve.org, NVD
• CWE-121: Stack-based Buffer Overflow at cwe.mitre.org

The vulnerability was publicly disclosed 27. 1. 2026.

Under certain conditions, an unauthenticated remote attacker can cause the gpg-agent process to crash or corrupt data in memory, and potentially execute code, by sending a specially crafted encrypted CMS (S/MIME) EnvelopedData message [2][6]. Detailed information about the vulnerability can be found at [2].

The vulnerability is present in product:

• GnuPG; >=2.5.13, <2.5.17;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2026-24881 at cve.org, NVD
• CWE-121: Stack-based Buffer Overflow at cwe.mitre.org

The vulnerability was publicly disclosed 27. 1. 2026.

An unauthenticated remote attacker can cause a process crash by sending a specially crafted packet with a digital signature [3][7].

The vulnerability is present in product:

• GnuPG; <2.5.17;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

More information:

• CVE-2026-24883 at cve.org, NVD
• CWE-476: NULL Pointer Dereference at cwe.mitre.org

The vulnerability was publicly disclosed 27. 1. 2026.