{"id":"CVE-2026-41989","title":"Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.","summary":"Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.","severity":"medium","cvss":6.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-787","CWE-131"],"vendor":"gnupg","product":"libgcrypt","affected":["libgcrypt >= 1.8.8, < 1.10.4","libgcrypt >= 1.11.0, < 1.11.3","libgcrypt >= 1.12.0, < 1.12.2"],"patched":["libgcrypt 1.12.2"],"published":"2026-04-23","updated":"2026-10-15","sourceUpdated":"2026-10-15T02:19:23.150","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41989","references":[{"url":"https://dev.gnupg.org/T8211","label":"cve@mitre.org"},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000503.html","label":"cve@mitre.org"},{"url":"https://www.openwall.com/lists/oss-security/2026/04/21/1","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41989.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-41989"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461063"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41989"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41989"},{"url":"https://access.redhat.com/errata/RHSA-2026:50144"},{"url":"https://access.redhat.com/errata/RHSA-2026:50147"},{"url":"https://access.redhat.com/errata/RHSA-2026:52951"},{"url":"https://access.redhat.com/errata/RHSA-2026:47117"},{"url":"https://access.redhat.com/errata/RHSA-2026:58979"},{"url":"https://access.redhat.com/errata/RHSA-2026:58978"},{"url":"https://access.redhat.com/errata/RHSA-2026:58977"},{"url":"https://access.redhat.com/errata/RHSA-2026:52953"},{"url":"https://access.redhat.com/errata/RHSA-2026:52952"},{"url":"https://access.redhat.com/errata/RHSA-2026:52950"},{"url":"https://access.redhat.com/errata/RHSA-2026:72475"},{"url":"https://access.redhat.com/errata/RHSA-2026:72395"},{"url":"https://access.redhat.com/errata/RHSA-2026:72399"},{"url":"https://access.redhat.com/errata/RHSA-2026:72476"},{"url":"https://access.redhat.com/errata/RHSA-2026:72502"},{"url":"https://access.redhat.com/errata/RHSA-2026:72470"},{"url":"https://access.redhat.com/errata/RHSA-2026:72394"},{"url":"https://access.redhat.com/errata/RHSA-2026:54760"},{"url":"https://access.redhat.com/errata/RHSA-2026:8466"},{"url":"https://access.redhat.com/errata/RHSA-2026:53371"},{"url":"https://access.redhat.com/errata/RHSA-2026:73960"},{"url":"https://access.redhat.com/errata/RHSA-2026:73962"},{"url":"https://access.redhat.com/errata/RHSA-2026:54387"},{"url":"https://access.redhat.com/errata/RHSA-2026:58981"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.00182,"epssPercentile":0.07758,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-04-23T15:58:58.277481Z"},"scores":{"nvd":6.7,"vendor":7.5,"cna":6.7},"ingestedAt":"2026-09-08T15:33:26.989Z","slug":"CVE-2026-41989","body":"## Overview\n\nLibgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.\n\n## Affected\n\n- `libgcrypt >= 1.8.8, < 1.10.4`\n- `libgcrypt >= 1.11.0, < 1.11.3`\n- `libgcrypt >= 1.12.0, < 1.12.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `libgcrypt 1.12.2`\n\n## Vendor advisories\n\n- **RHSA-2026:50144** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10) · released 2026-08-04 · [advisory](https://access.redhat.com/errata/RHSA-2026:50144)\n- **RHSA-2026:50147** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9) · released 2026-08-04 · [advisory](https://access.redhat.com/errata/RHSA-2026:50147)\n- **RHSA-2026:52951** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS EUS (v. 10.0) · released 2026-08-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:52951)\n- **RHSA-2026:47117** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8) · released 2026-08-12 · [advisory](https://access.redhat.com/errata/RHSA-2026:47117)\n- **RHSA-2026:58979** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:58979)\n- **RHSA-2026:58978** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:58978)\n- **RHSA-2026:58977** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8) · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:58977)\n- **RHSA-2026:52953** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS E4S (v.9.2) · released 2026-08-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:52953)\n- **RHSA-2026:52952** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS E4S (v.9.4) · released 2026-08-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:52952)\n- **RHSA-2026:52950** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS EUS (v.9.6) · released 2026-08-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:52950)\n- **RHSA-2026:72475** · Red Hat · fixed in: Cert Manager support for Red Hat OpenShift release 1.20 · released 2026-09-28 · [advisory](https://access.redhat.com/errata/RHSA-2026:72475)\n- **RHSA-2026:54760** · Red Hat · fixed in: Red Hat Discovery 2 · released 2026-08-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:54760)","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":36.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":221727,"id":"CVE-2026-41989","ts":1792035338780,"field":"cvss","old":"7.5","new":"6.7"},{"seq":221726,"id":"CVE-2026-41989","ts":1792035338780,"field":"severity","old":"high","new":"medium"},{"seq":208922,"id":"CVE-2026-41989","ts":1790062285548,"field":"cvss","old":"6.7","new":"7.5"},{"seq":208921,"id":"CVE-2026-41989","ts":1790062285548,"field":"severity","old":"medium","new":"high"}]}