CVE-2024-53856

rPGP Panics on Malformed Untrusted Input PUBLISHED

Description (CNA)

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.

Affected (CNA)

Vendor / product	Versions
rpgp / rpgp	affected < 0.14.1

CWE

CWE-130, CWE-148, CWE-617

References

https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.