gpgme

Page content
  • Author: kikadf
  • Vulnerable: 1.3.1-5
  • Unaffected: 1.3.1-6arcturus1

Tomáš Trnka discovered a heap-based buffer overflow within the gpgsm status handler of GPGME, a library designed to make access to GnuPG easier for applications. An attacker could use this issue to cause an application using GPGME to crash (denial of service) or possibly to execute arbitrary code.

CVEs: