rPGP vulnerability allows attackers to trigger resource exhaustion vulnerabilities

CVE-2024-53857

What is CVE-2024-53857?

The rPGP, a pure Rust implementation of the OpenPGP standard, is susceptible to resource exhaustion vulnerabilities. Versions prior to 0.14.1 allow attackers to exploit crafted messages, leading to potential denial of service through excessive resource consumption during general message parsing and symmetric key decryption processes. This vulnerability poses a significant risk as it can impact the functionality of applications relying on rPGP for secure messaging.

References