01 Record

CVE-2020-25125

GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.28% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 69.6% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2020-09-03 17:48Z6 YR AGO

Last updated

2024-08-04 15:26Z2 YR AGO

Reserved

2020-09-03

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Base
CWE-129Improper Validation of Array IndexVariant

Data version

5.1

Document digest

991ba31db3263636dfd741a18c4ba68bb8ddb850fd6b2ee81ad4bb89adf34785

05 Affected products

VendorProductVersionsPlatforms

gnupggnupgNot specified—

gpg4wingpg4winNot specified—

redhatenterprise_linuxNot specified—

06 References

bugzilla.opensuse.orghttps://bugzilla.opensuse.org/show_bug.cgi?id=1176034x_refsource_MISC
dev.gnupg.orghttps://dev.gnupg.org/rG8ec9573e57866dda5efb4677d4454161517484bcx_refsource_MISC
lists.gnupg.orghttps://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.htmlx_refsource_MISC
dev.gnupg.orghttps://dev.gnupg.org/T5050x_refsource_MISC
www.openwall.com[oss-security] 20200903 GNUPG released with AEAD sec fix CVE-2020-25125http://www.openwall.com/lists/oss-security/2020/09/03/4mailing-listx_refsource_MLIST
www.openwall.com[oss-security] 20200903 CVE-2020-25125: gnupg2: buffer overflow when importing a key with AEAD preferenceshttp://www.openwall.com/lists/oss-security/2020/09/03/5mailing-listx_refsource_MLIST

07 Fixed in

Arch Linux

gnupg
Fixed in 2.2.23-1

Source: Arch Linux Security Tracker, the Arch Linux security team. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.