Known vulnerabilities in GnuPG

Vendor: GNU
Software: GnuPG
Software CPE: cpe:2.3:a:gnu:gnupg:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GnuPG GnuPG is affected by 19 known vulnerabilities: 3 high, 11 medium, 5 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120611 - Out-of-bounds write
CVE-2025-68973
CWE-787 High
No
No
- 29.12.2025 SB2025122901
SB2025122902
SB2026010860
and 27 more
#VU120610 - Numeric Truncation Error
CVE-2025-68972
CWE-197 Medium
No
No
- 29.12.2025 SB2025122901
#VU114065 - Resource Management Errors
CVE-2008-1530
CWE-399 High
No
No
1.4.9, 2.0.9 14.08.2025 SB2008032801
#VU106992 - Improper input validation
CVE-2025-30258
CWE-20 Medium
No
No
2.5.5 04.04.2025 SB2025040426
SB2025040430
SB2025040439
and 9 more
#VU64909 - Improper Verification of Cryptographic Signature
CVE-2022-34903
CWE-347 Medium
No
No
2.3.7 04.07.2022 SB2022070429
SB2022070443
SB2022070521
and 58 more
#VU31993 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-14855
CWE-327 Medium
No
No
- 20.03.2020 SB2020032017
SB2019112642
SB20200611175
and 2 more
#VU33822 - Improper input validation
CVE-2015-0837
CWE-20 Medium
No
No
1.4.19 29.11.2019 SB2019112917
SB2015092809
SB2015080406
and 9 more
#VU30571 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3591
CWE-200 Low
No
No
1.4.19 29.11.2019 SB2019112915
SB2015092808
SB2015080406
and 9 more
#VU35025 - Improper Certificate Validation
CVE-2011-2207
CWE-295 Medium
No
No
2.1.0 27.11.2019 SB2019112723
#VU30593 - Use After Free
CVE-2015-1606
CWE-416 High
No
No
2.1.2 20.11.2019 SB2019112026
SB2015042303
SB2015042304
and 1 more
#VU30594 - Improper input validation
CVE-2015-1607
CWE-20 Low
No
No
2.1.2 20.11.2019 SB2019112026
SB2015042305
SB2015042306
#VU20961 - Improper Validation of Certificate with Host Mismatch
CVE-2019-13050
CWE-297 Medium
No
No
2.2.17 10.09.2019 SB2019062907
SB2019091018
SB2019081531
and 12 more
#VU13258 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-12020
CWE-451 Low
No
No
- 10.06.2018 SB2018061101
SB2018061102
SB2018061103
and 20 more
#VU12732 - Key Management Errors
CVE-2018-9234
CWE-320 Low
No
No
- 15.05.2018 SB2018031914
SB2018052512
SB2023092844
and 7 more
#VU32509 - Improper input validation
CVE-2014-4617
CWE-20 Medium
No
No
1.4.17 25.06.2014 SB2014062501
SB2014072214
SB2014072215
and 5 more
#VU42223 - Credentials Management
CVE-2013-4576
CWE-255 Low
No
No
- 20.12.2013 SB2013122007
SB2015080406
SB2014011413
and 1 more
#VU33303 - Cryptographic Issues
CVE-2013-4351
CWE-310 Medium
No
No
1.4.0 10.10.2013 SB2013101003
SB2013112631
SB2014022106
#VU43156 - Improper input validation
CVE-2012-6085
CWE-20 Medium
No
No
- 24.01.2013 SB2013012406
SB2014022106
#VU32850 - Improper input validation
CVE-2010-2547
CWE-20 Medium
No
No
2.0.17 05.08.2010 SB2010080501
SB2011102507
SB2011102203
and 1 more