AZL-83544

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-83544

Upstream

Published

2026-04-23T05:16:05Z

Modified

2026-09-08T17:33:11Z

Summary

CVE-2026-41989 affecting package libgcrypt for versions less than 1.10.3-2

Details

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.3-2

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-83544.json"