Lucene search
+L

1197 matches found

OSV
OSV
•added 2026/04/23 5:16 a.m.•12 views

AZL-83544 CVE-2026-41989 affecting package libgcrypt for versions less than 1.10.3-2

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/23 5:16 a.m.•12 views

UBUNTU-CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/23 5:16 a.m.•13 views

UBUNTU-CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS7.3AI score0.0018EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/23 4:39 a.m.•41 views

CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS0.0018EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/23 4:39 a.m.•26 views

CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS7.3AI score0.0018EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/23 4:39 a.m.•10 views

CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS7.3AI score0.0018EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/23 4:39 a.m.•63 views

CVE-2026-41990

CVE-2026-41990 affects Libgcrypt prior to 1.12.2, where Dilithium signing mishandles a static array write that lacks a bounds check. The issue does not use attacker-controlled data. CVSSv3.1 base metrics indicate a Medium risk (4.0) with LOCAL attack vector, HIGH complexity, NONE privileges, and ...

4CVSS7.3AI score0.0018EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2026/04/23 4:39 a.m.•20 views

CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS7.3AI score0.0018EPSS
SaveExploits0
OSV
OSV
•added 2026/04/23 4:39 a.m.•19 views

CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/04/23 4:30 a.m.•233 views

CVE-2026-41989

Libgcrypt before 1.12.2 is affected by CVE-2026-41989, where a heap-based buffer overflow can occur via crafted ECDH ciphertext to gcry_pk_decrypt, enabling denial of service. Vulnerable component: Libgcrypt crypto library (ECDH/decrypt path). Impact: DoS (potential crash) as described. Mitigatio...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2026/04/23 4:30 a.m.•14 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/23 4:30 a.m.•25 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/23 4:30 a.m.•81 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS0.00192EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/04/23 4:30 a.m.•13 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/04/23 4:30 a.m.•38 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References5
OSV
OSV
•added 2026/04/23 4:30 a.m.•21 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS6.9AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/04/23 12:00 a.m.•20 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS7.1AI score0.00192EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/23 12:00 a.m.•6 views

CVE-2026-41989: Out-of-bounds Write

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS6.1AI score0.00192EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•22 views

Libgcrypt 缓冲区错误漏洞

Libgcrypt is a general-purpose encryption library based on GnuPG code from the American GNU community. This library implements various encryption algorithms, including symmetric ciphers, hash algorithms, public key algorithms, etc. Versions of Libgcrypt prior to 1.12.2 contained a buffer error...

6.7CVSS7.2AI score0.00192EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/23 12:00 a.m.•6 views

CVE-2026-41990: Out-of-bounds Write

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data...

4CVSS5.9AI score0.0018EPSS
SaveExploits0References2
Rows per page
Query Builder