Security Advisory

CVE-2020-25125

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-03 17:48:07

Last updated 2024-08-04 15:26:09

Assigner mitre

State PUBLISHED

Description

GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attackers OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.

← Browse all CVEs View on cve.org ↗