Out-of-Bounds Write Vulnerability in GnuPG Affected by Armor Filter

CVE-2025-68973

What is CVE-2025-68973?

A vulnerability in GnuPG's armor_filter function can lead to an out-of-bounds write when processing crafted input. This occurs due to two inadvertent increments of an index variable, which can compromise memory integrity and stability. The flaw was identified in versions up to and including 2.4.8, signalling an urgent need for users to update their GnuPG installations to prevent potential exploitation.

References