Security Advisory

CVE-2026-41990

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-23 04:39:04

Last updated 2026-04-23 16:22:42

Assigner mitre

CVSS score 4.0

State PUBLISHED

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.