CVE-2025-68973

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.4.9 GnuPG versions 2.2.51 and earlier

Description The issue resides in the armor filter function within the g10/armor.c file. A flaw exists due to two increments of an index variable where only one is intended. This leads to an out-of-bounds write condition when processing crafted input. Exploitation of this issue by a remote attacker could potentially lead to arbitrary code execution through the submission of a specially crafted PGP message. The vulnerability is related to an integer overflow.

Recommendations GnuPG versions prior to 2.4.9: Upgrade to version 2.4.9 or later. GnuPG versions 2.2.51 and earlier: Upgrade to version 2.2.51 or later.