CVE-2025-68973 HIGH

CVE-2025-68973

Vendor Gnupg
Product GnuPG
Weakness CWE-675
Published December 28, 2025
Last update April 30, 2026

CVSS base score

7.8/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Key dates

02Disclosure timeline

December 28, 2025 CVE published
April 30, 2026 Record updated