Known Vulnerabilities for Openpgp by Pgp

Listed below are 1 of the newest known vulnerabilities associated with "Openpgp" by "Pgp".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2026-59649 json	In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue als...	Not Provided	2026-08-03	2026-08-03
CVE-2026-59648 json	In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects ...	Not Provided	2026-08-03	2026-08-03
CVE-2026-59643 json	In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bou...	Not Provided	2026-08-03	2026-08-03
CVE-2026-59640 json	In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also ...	Not Provided	2026-08-03	2026-08-03
CVE-2026-12817 json	In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects...	Not Provided	2026-08-03	2026-08-03
CVE-2026-2625 json	A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Pac...	Not Provided	2026-04-03	2026-07-02
CVE-2024-8443 json	A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with...	Not Provided	2024-09-10	2026-06-30
CVE-2001-0381 json		Not Provided	2001-06-27	2025-04-03

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Pgp	Openpgp	-