high8.1
CVE-2026-24881
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-a…
Impact
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnupg | Gnupg | from 2.5.13 before 2.5.17 |
| Gpg4win | Gpg4win | from 5.0.0 before 5.0.1 |