Vulnerability · Published Jan 27, 2026 · Assigned by mitre
CVE-2026-24881
High 8.1
In plain English
A high-severity stack buffer overflow in GnuPG from GnuPG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)1.8%top 21.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.openwall.com/lists/oss-security/2026/01/27/8
- https://dev.gnupg.org/T8044
- https://access.redhat.com/security/cve/CVE-2026-24881 vdb-entry, x_refsource_REDHAT
- RHBZ#2433480 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24881.json x_sadp-csaf-vex