← All advisories

High severity8.4NVD Advisory· Published Jan 27, 2026· Updated Jul 15, 2026

CVE-2026-24882

CVE-2026-24882

Description

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16

Gnupg/Gnupg2 versions
cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:gnupg:gnupg:*:*:*:*:-:*:*:*range: >=2.5.13,<2.5.17
- (no CPE)range: 0
Gnupg/tpm2daemonllm-fuzzy
Range: <2.5.17
osv-coords13 versions
pkg:rpm/almalinux/gnupg2 pkg:rpm/almalinux/gnupg2-smime pkg:rpm/opensuse/gpg2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/gpg2&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/gpg2&distro=openSUSE%20Tumbleweed pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Micro%206.2
< 2.4.5-4.el10_1+ 12 more
- (no CPE)range: < 2.4.5-4.el10_1
- (no CPE)range: < 2.4.5-4.el10_1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.5.5-160000.4.1
- (no CPE)range: < 2.5.17-1.1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.5.5-160000.4.1
- (no CPE)range: < 2.4.4-150600.3.15.1
- (no CPE)range: < 2.5.5-160000.4.1
- (no CPE)range: < 2.4.4-7.1
- (no CPE)range: < 2.4.4-slfo.1.1_7.1
- (no CPE)range: < 2.5.5-160000.4.1

Patches

Vulnerability mechanics

References

7

dev.gnupg.org/T8045nvdExploitProduct
www.openwall.com/lists/oss-security/2026/01/27/8nvdMailing ListThird Party Advisory
access.redhat.com/errata/RHSA-2026:2719nvd
access.redhat.com/errata/RHSA-2026:2753nvd
access.redhat.com/security/cve/CVE-2026-24882nvd
bugzilla.redhat.com/show_bug.cginvd
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24882.jsonnvd

News mentions

0

No linked articles in our index yet.