CVE-2026-24882
High · 8.4CVSS
8.4
EPSS
0.4%
Published
Jan 27, 2026
CISA due date
—
The record
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | gpg2 | 0 | 2.4.4-150600.3.15.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | gpg2 | 0 | 2.4.4-150600.3.15.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | gpg2 | 0 | 2.4.4-150600.3.15.1 |
| openSUSE:Leap 15.6 | gpg2 | 0 | 2.4.4-150600.3.15.1 |
| openSUSE:Leap 16.0 | gpg2 | 0 | 2.5.5-160000.4.1 |
| openSUSE:Tumbleweed | gpg2 | 0 | 2.5.17-1.1 |
Related vulnerabilities
- CVE-2025-68973 In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index… Also affects gpg2
- CVE-2026-24883 In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return… Also affects gpg2
- CVE-2026-24881 In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an… Also affects gpg2
- CVE-2014-4617 The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before… Also affects gpg2
- CVE-2026-107705 Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in… CWE-121
- CVE-2026-95818 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc)… CWE-121
- CVE-2026-61548 Rsyslog is a rocket-fast system for log processing. CWE-121
- CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. CWE-121