← All advisories

Unrated severityNVD Advisory· Published Jan 27, 2026· Updated Jan 28, 2026

CVE-2026-24882

CVE-2026-24882

Description

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15

Gnupg/Gnupgllm-fuzzy2 versions
<2.5.17+ 1 more
- (no CPE)range: <2.5.17
- (no CPE)range: 0
osv-coords13 versions
pkg:rpm/almalinux/gnupg2 pkg:rpm/almalinux/gnupg2-smime pkg:rpm/opensuse/gpg2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/gpg2&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/gpg2&distro=openSUSE%20Tumbleweed pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Micro%206.2
< 2.4.5-4.el10_1+ 12 more
- (no CPE)range: < 2.4.5-4.el10_1
- (no CPE)range: < 2.4.5-4.el10_1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.5.5-160000.4.1
- (no CPE)range: < 2.5.17-1.1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.5.5-160000.4.1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.5.5-160000.4.1
- (no CPE)range: < 2.4.4-7.1
- (no CPE)range: < 2.4.4-slfo.1.1_7.1
- (no CPE)range: < 2.5.5-160000.4.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.