CVE-2026-24882

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and…

High8.4EPSS 0.44%

Published: 27 Jan 2026
Updated: 15 Jul 2026
Reserved: 27 Jan 2026
Assigned by: mitre

Description

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

Scores

CVSS scores of CVE-2026-24882, by who scored it
Scored by	CVSS	Score	Vector
mitreCNA (assigner)	3.1	High8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADPADP (enrichment)	3.1	High8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.44% · top 62% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

CWE-121 Stack-based Buffer Overflow (opens in a new tab)All about CWE-121 and its CVEs

Affected products

GnuPG · GnuPG
- affected < 2.5.17

References (7)

https://www.openwall.com/lists/oss-security/2026/01/27/8 (opens in a new tab)
https://dev.gnupg.org/T8045 (opens in a new tab)
https://access.redhat.com/security/cve/CVE-2026-24882 (opens in a new tab)vdb-entryx_refsource_REDHAT
RHBZ#2433464 (opens in a new tab)issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24882.json (opens in a new tab)x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:2753 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:2719 (opens in a new tab)vendor-advisoryx_refsource_REDHAT

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2026-24882](https://trackcve.app/badge/CVE-2026-24882.svg)](https://trackcve.app/cve/CVE-2026-24882)

Record last updated 15 Jul 2026, 01:16 UTC.