CVE-2026-24882
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
In GnuPG before version 2.5.17, a stack-based buffer overflow exists in the tpm2daemon component during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
Risk Assessment
An attacker could remotely cause a crash or potentially take control of the system, leading to confidentiality and integrity breaches.
Recommendation
Immediately update GnuPG to version 2.5.17 or later, which includes a fix for this vulnerability.
Other vulnerabilities in GnuPG
See all- CVE-2019-14855Low
A flaw in GnuPG before version 2.2.18 allows certificate signature forgery using SHA-1 collision attacks. An attacker can create forged certificate signatures, compromising authentication integrity.
- CVE-2026-24881High
In GnuPG before version 2.5.17, a crafted CMS (S/MIME) EnvelopedData message with an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can lead to denial of service, but also memory corruption that could result in remote code execution.
Original NVD description (English source)
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.