Unrated

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a den...

CVE-2026-24883 First seen on SecPulse Jan 28, 03:43

Original description The description as published by the source.

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web dev.gnupg.org
web openwall.com

Key facts

Severity: Unrated
Published: Jan 28, 2026
First seen on SecPulse: Jan 28, 03:43
CWE: CWE-476

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:14