Integer Overflow Vulnerability in Libksba Library Affecting GnuPG

CVE-2022-3515

What is CVE-2022-3515?

The Libksba library contains a vulnerability due to an integer overflow in its Certificate Revocation List (CRL) parser. This flaw can potentially be exploited by remote attackers who send specially crafted data, such as malicious S/MIME attachments, to applications utilizing Libksba. Successful exploitation may allow an attacker to execute arbitrary code within the context of the affected application, posing significant risks to system integrity and security.

References