CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Libgcrypt — security advisories

4 advisorieslatest 2026-09-01⚡ RSS feed

Tracked Libgcrypt products:

⚡ Watch Libgcrypt

Get an email when a new Libgcrypt advisory drops — max one per day, one-click unsubscribe.

USN-8711-1: Libgcrypt vulnerability

unknownCVE-2024-2236ubuntu2026-09-01

CVE-2021-3345: _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.

highCVSS 7.8CVE-2021-3345msrc2026-08-06

CVE-2018-6829: cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.

unknownCVE-2018-6829msrc2026-08-06

CVE-2021-33560: Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm and the window size is not chosen appropriately. This for example affects use of ElGamal in OpenPGP.

highCVSS 7.5CVE-2021-33560msrc2026-08-06