CVE-2026-24882Disclosure(gnupg / gnupg)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch gnupg gnupg systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

gnupg CVEs Back to dashboard

1.3/ 10 priority

Sources & remediation

Exploit / PoC references

https://dev.gnupg.org/T8045

Vendor / third-party advisories

https://www.openwall.com/lists/oss-security/2026/01/27/8

Other references

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gnupg
gpg4win

Threat summary

Patch or workaround signal is available
11 mentions across 8 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 6 signals
Disclosure: 5 classified signals
General: 3 classified signals
Peaked 7d ago at 3 mentions (2026-01-27); latest day: 1
11 total mentions across 8 days

Affected systems

Vendors

gnupg gpg4win

Products

gnupggpg4win

Deep dive

Activity timeline11 mentions / 8d

Signal classification3 categories

Disclosure

545.5%

General

327.3%

Patch

327.3%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-01-27	3	Disclosure3
2026-01-28	2	Disclosure1General1
2026-02-08	1	Patch1
2026-02-19	1	Disclosure1
2026-03-13	1	Patch1
2026-03-14	1	Patch1
2026-03-15	1	General1
2026-05-02	1	General1

Full discourse11 posts

Open Source Security mailing list@oss_security243d
Patch
GnuPG 2.5.17 fixes possible RCE & more https://www.openwall.com/lists/oss-security/2026/01/27/8 CVE-2026-24881 T8044 gpg-agent stack buffer overflow in pkdecrypt using KEM, affects only GnuPG and Gpg4win released 2025-10-22+ CVE-2026-24882 T8045 Stack-based buffer overflow in TPM2 PKDECRYPT CVE-2026-24883 T8049
Post summary
GnuPG 2.5.17 addresses several stack buffer overflow vulnerabilities (CVE‑2026‑24881, CVE‑2026‑24882, CVE‑2026‑24883) with a released patch, and no evidence of active exploitation or PoC is provided.
0321041.3K
4.4K followersView on X
~lyn@lynettdoteth159d
General
@tiredhungryangr One? CVE-2026-2796, CVE-2026-24881, CVE-2026-24882, CVE-2025-32988, CVE-2025-32989, CVE-2025-64175, CVE-2026-25242, CVE-2026-28357, CVE-2026-28359, CVE-2026-26216, CVE-2026-26217, CVE-2026-25946, CVE-2026-32110, CVE-2026-30930, CVE-2026-30928, CVE-2026-32596...
Post summary
A tweet listing several CVE identifiers without additional context, details, or actionable information.
10000932
825 followersView on X
Kazuki Omo@omokazuki253d
General
SIOSセキュリティブログを更新しました。 GnuPGの脆弱性(High: CVE-2026-24881, CVE-2026-24882, Low: CVE-2026-24883) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #linux #gnupg #gpg https://security.sios.jp/vulnerability/gnupg-security-vulnerability-20260129/
Post summary
The blog post announces new GnuPG vulnerabilities by listing CVE numbers and severity, without providing technical details, patches, or exploitation information.
00010117
360 followersView on X
Lambda Watchdog@LambdaWatchdog208d
General
🔍 Lambda Watchdog detected that CVE-2026-24882 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/414 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
The tweet informs that CVE‑2026‑24882 is no longer detected in the latest AWS Lambda base image scans, linking to a GitHub issue, but provides no further exploitation, patch, or technical details.
0000026
32 followersView on X
Lambda Watchdog@LambdaWatchdog209d
Patch
🔍 Lambda Watchdog detected that CVE-2026-24882 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/414 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
AWS indicates CVE-2026-24882 is no longer present in the latest Lambda base image scans, implying it has been addressed.
0000033
31 followersView on X
Lambda Watchdog@LambdaWatchdog210d
Patch
🔍 Lambda Watchdog detected that CVE-2026-24882 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/414 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
The post indicates that CVE-2026-24882 has been remediated in the latest AWS Lambda base images, suggesting successful patching.
0000040
31 followersView on X
Lambda Watchdog@LambdaWatchdog232d
Disclosure
🚨 New HIGH CVE detected in AWS Lambda 🚨 CVE-2026-24882 impacts gnupg2-minimal in 20 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/414 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
Post summary
The tweet announces the discovery of a new high‑severity CVE (CVE‑2026‑24882) affecting gnupg2‑minimal in AWS Lambda base images, providing basic technical details and links for more information.
0000029
30 followersView on X
PulsePatch.io@pulsepatchio254d
Disclosure
A stack-based buffer overflow in GnuPG 2 tpm2daemon affects TPM-backed RSA/ECC key decryption operations (CVE-2026-24882). Review your #GnuPG configurations for #TPM usage. #infosec https://www.pulsepatch.io/posts/cve-2026-24882-gnupg2-tpm2daemon-buffer-overflow
Post summary
The tweet announces a stack-based buffer overflow in GnuPG 2 tpm2daemon that compromises TPM-backed RSA/ECC key decryption, urging users to review their TPM configurations.
00000101
1 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds254d
Disclosure
CVE-2026-24882 Stack-Based Buffer Overflow in GnuPG TPM2 Daemon Before 2.5.17 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24882
Post summary
CVE-2026-24882 describes a stack‑based buffer overflow in the GnuPG TPM2 daemon prior to version 2.5.17; the entry lacks PoC, exploit code, patch information, or evidence of active exploitation.
0000051
4.0K followersView on X
The Hacker Wire@TheHackerWire254d
Disclosure
🟠 CVE-2026-24882 - High In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. https://www.thehackerwire.com/vulnerability/CVE-2026-24882/ https://t.co/USjcqgOmU5
Post summary
CVE-2026-24882 is a stack‑based buffer overflow in GnuPG's tpm2daemon (pre‑2.5.17) during PKDECRYPT for TPM‑backed RSA/ECC keys, with no exploitation or patch information provided.
0000050
113 followersView on X
CVE@CVEnew254d
Disclosure
CVE-2026-24882 In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. https://www.cve.org/CVERecord?id=CVE-2026-24882
Post summary
The statement announces a stack‑based buffer overflow in GnuPG's tpm2daemon component, affecting TPM‑backed RSA and ECC keys, with no PoC, exploit, patch, or active exploitation details provided.
00000152
56.5K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gnupg	gnupg	-	-	-
App	gpg4win	gpg4win	-	-	-

Explore more

Back to dashboard gnupg CVEs gpg4win CVEs gnupg vulnerabilities

What researchers are saying

CVE-2026-24882

~lyn[verified]@lynettdotethGeneral

A tweet listing several CVE identifiers without additional context, details, or actionable information.

Open Source Security mailing list@oss_securityPatch

GnuPG 2.5.17 addresses several stack buffer overflow vulnerabilities (CVE‑2026‑24881, CVE‑2026‑24882, CVE‑2026‑24883) with a released patch, and no evidence of active exploitation or PoC is provided.

Kazuki Omo@omokazukiGeneral

The blog post announces new GnuPG vulnerabilities by listing CVE numbers and severity, without providing technical details, patches, or exploitation information.

Lambda Watchdog@LambdaWatchdogGeneral

The tweet informs that CVE‑2026‑24882 is no longer detected in the latest AWS Lambda base image scans, linking to a GitHub issue, but provides no further exploitation, patch, or technical details.

Lambda Watchdog@LambdaWatchdogPatch

AWS indicates CVE-2026-24882 is no longer present in the latest Lambda base image scans, implying it has been addressed.

Lambda Watchdog@LambdaWatchdogPatch

The post indicates that CVE-2026-24882 has been remediated in the latest AWS Lambda base images, suggesting successful patching.

Lambda Watchdog@LambdaWatchdogDisclosure

The tweet announces the discovery of a new high‑severity CVE (CVE‑2026‑24882) affecting gnupg2‑minimal in AWS Lambda base images, providing basic technical details and links for more information.

PulsePatch.io@pulsepatchioDisclosure

The tweet announces a stack-based buffer overflow in GnuPG 2 tpm2daemon that compromises TPM-backed RSA/ECC key decryption, urging users to review their TPM configurations.