CVE-2026-57062

NameCVE-2026-57062
DescriptionCMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gnupg2 (PTS)bullseye2.2.27-2+deb11u2fixed
bullseye (security)2.2.27-2+deb11u3fixed
bookworm2.2.40-1.1+deb12u2vulnerable
trixie2.4.7-21+deb13u1vulnerable
forky2.4.9-5fixed
sid2.4.9-7fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gnupg2sourcebullseye(not affected)
gnupg2source(unstable)2.4.9-5

Notes

[trixie] - gnupg2 <no-dsa> (Minor issue)
[bookworm] - gnupg2 <postponed> (Minor issue)
[bullseye] - gnupg2 <not-affected> (gpgsm GCM CMS-decrypt path not present; introduced after 2.2.27)
https://blog.calif.io/p/how-to-format-a-ciphertext
Fixed by: https://github.com/gpg/gnupg/commit/4c7e68cf3d335328821bdbb70db309a60d0e4fd4

Search for package or bug name: Reporting problems