Vulnerabilities > Gnupg > Low

DATE CVE VULNERABILITY TITLE RISK
2023-02-23 CVE-2022-3219 Out-of-bounds Write vulnerability in Gnupg
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
local
low complexity
gnupg CWE-787
3.3
2016-04-19 CVE-2015-7511 Information Exposure vulnerability in multiple products
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
high complexity
gnupg debian canonical CWE-200
2.0