High severity8.1NVD Advisory· Published Jan 27, 2026· Updated Jul 15, 2026

CVE-2026-24881

Description

In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gnupg/Gnupg2 versions
cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*range: >=2.5.13,<2.5.17
- (no CPE)range: 2.5.13
Gnupg/gpg-agentllm-fuzzy
Range: <2.5.17
osv-coords
pkg:rpm/opensuse/gpg2&distro=openSUSE%20Tumbleweed
Range: < 2.5.17-1.1

Patches

Vulnerability mechanics

References

dev.gnupg.org/T8044nvdExploitProduct
www.openwall.com/lists/oss-security/2026/01/27/8nvdMailing ListThird Party Advisory
access.redhat.com/security/cve/CVE-2026-24881nvd
bugzilla.redhat.com/show_bug.cginvd
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24881.jsonnvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000