https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:15:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-41989 <p><strong>Affected:</strong> gnupg Libgcrypt, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.</p> <p><strong>Affected:</strong> gnupg Libgcrypt, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.</p> https://vulnerability.circl.lu/vuln/cve-2026-41989 https://vulnerability.circl.lu/vuln/usn-8319-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libgcrypt20, Ubuntu:24.04:LTS: libgcrypt20, Ubuntu:25.10: libgcrypt20, Ubuntu:26.04:LTS: libgcrypt20</p> <p>It was discovered that Libgcrypt incorrectly handled crafted ECDH ciphertext. An attacker could possibly use this issue to cause Libgcrypt to crash, resulting in a denial of service. (CVE-2026-41989)</p> <p>It was discovered that Libgcrypt incorrectly handled Dilithium signing. An attacker could possibly use this issue to cause Libgcrypt to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-41990)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libgcrypt20, Ubuntu:24.04:LTS: libgcrypt20, Ubuntu:25.10: libgcrypt20, Ubuntu:26.04:LTS: libgcrypt20</p> <p>It was discovered that Libgcrypt incorrectly handled crafted ECDH ciphertext. An attacker could possibly use this issue to cause Libgcrypt to crash, resulting in a denial of service. (CVE-2026-41989)</p> <p>It was discovered that Libgcrypt incorrectly handled Dilithium signing. An attacker could possibly use this issue to cause Libgcrypt to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-41990)</p> https://vulnerability.circl.lu/vuln/usn-8319-1