Most recent entries from all

EUVD-2026-263585

fkie_cve-2025-67897

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.

GHSA-v6x3-9r38-r27q — Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too short

Affected: crates.io: sequoia-openpgp

msrc_CVE-2025-67897 — In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take adv…

msrc_CVE-2025-67897

RUSTSEC-2025-0136 — Underflow in aes_key_unwrap function

Affected: crates.io: sequoia-openpgp

The `aes_key_unwrap` function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value would be interpreted as a huge allocation. The allocator would then fail to allocate the memory and panic.

An attacker could trigger this panic by sending a victim an encrypted message whose PKESK or SKESK packet has been specially modified. When the victim decrypts the message, the program would crash.

UBUNTU-CVE-2025-67897

Affected: Ubuntu:22.04:LTS: rust-sequoia-openpgp, Ubuntu:24.04:LTS: rust-sequoia-openpgp, Ubuntu:25.10: rust-sequoia-openpgp