GHSA-2VGQ-WCHC-25W7 Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption

Summary decipher.finish in CBC and ECB mode accepted malformed PKCS7 padding: only the last byte was checked, against a limit of four blocks, so mismatched padding bytes, a zero count and oversized counts were accepted and up to four blocks of plaintext could be silently removed. Fixed in...

Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption

Summary decipher.finish in CBC and ECB mode accepted malformed PKCS7 padding: only the last byte was checked, against a limit of four blocks, so mismatched padding bytes, a zero count and oversized counts were accepted and up to four blocks of plaintext could be silently removed. Fixed in...

EUVD-2025-205487

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...