In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

🗓️ 30 Dec 2025 09:01:21Reported by MicrosoftType

GnuPG armor_filter out-of-bounds write caused by a double index increment; ExtendedLTS fix starts 2.2.51.

Reporter	Title	Published	Views	Family All 222
IBM Security Bulletins	Security Bulletin: Vulnerability in gnupg affects IBM Netezza Appliance	23 Apr 202610:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	9 Feb 202614:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	24 Mar 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: Muliple security vulnerabilities found in TXSeries for Multiplatforms.	22 Apr 202614:18	–	ibm
GithubExploit	Exploit for Out-of-bounds Read in Libpng	22 Jan 202611:35	–	githubexploit
Tenable Nessus	Amazon Linux 2023 : gnupg2, gnupg2-minimal, gnupg2-smime (ALAS2023-2026-1380)	5 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gnupg2, --advisory ALAS2-2026-3125 (ALAS-2026-3125)	21 Jan 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0013: gnupg2 (ALINUX3-SA-2026:0013)	26 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : gnupg2 (ALSA-2026:0697)	16 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : gnupg2 (ALSA-2026:0719)	16 Jan 202600:00	–	nessus