Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt.
{
"sources": [
{
"modified": "2026-04-27T18:33:18.157Z",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-41989",
"published": "2026-04-23T05:16:05.750Z",
"database_specific": {
"status": "Analyzed"
},
"imported": "2026-05-14T00:51:22.580Z",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41989",
"id": "CVE-2026-41989"
},
{
"url": "https://api.github.com/advisories/GHSA-wrv8-79m2-qg24",
"modified": "2026-04-23T06:30:28Z",
"id": "GHSA-wrv8-79m2-qg24",
"published": "2026-04-23T06:30:22Z",
"imported": "2026-05-14T00:51:26.621Z",
"html_url": "https://github.com/advisories/GHSA-wrv8-79m2-qg24"
},
{
"url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-25192",
"modified": "2026-04-23T16:22:47Z",
"id": "EUVD-2026-25192",
"published": "2026-04-23T04:30:26Z",
"imported": "2026-05-14T00:51:24.152Z",
"html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25192"
}
],
"license": "CC-BY-4.0"
}