Vulnerabilities of GnuPG libgcrypt
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-41990 | Libgcrypt before 1.12.2 mishandles Dilithium signing | 4.0 Medium | Apr 23, 2026 |
| CVE-2026-41989 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH… | 6.7 Medium | Apr 23, 2026 |
| CVE-2017-7526 | libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of… | 6.1 Medium | Jul 26, 2018 |