6.7
Medium
CVE-2026-41989 Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH…
Description
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libgcrypt 1.12 | 1.12.0 → < 1.12.2 | 1.12.2 |
| libgcrypt 1.11 | 1.11.0 → < 1.11.3 | 1.11.3 |
| libgcrypt 1.8 | 1.8.8 → < 1.10.4 | 1.10.4 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.7 → latest | No fix stated |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.7 → latest | No fix stated |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.7 → latest | No fix stated |
References
- lists.gnupg.org lists.gnupg.org
- dev.gnupg.org dev.gnupg.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified