CVE-2025-68973

Published Dec 28, 2025

Last updated 4 months ago

Overview

Description
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
Source
cve@mitre.org
NVD status
Modified
Products
gnupg

Risk scores

CVSS 3.1

Type
Primary
Base score
7
Impact score
5.9
Exploitability score
1
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

cve@mitre.org
CWE-675
nvd@nist.gov
CWE-787

Social media

Hype score
Not currently trending
  1. ๐Ÿ” CRITICAL: #SUSE Linux GPG2 vuln (CVE-2025-68973) patched. Affects core cryptographic trust. High risk for enterprise integrity. Read more: ๐Ÿ‘‰https://t.co/DEkicGFquy #Security https://t.co/vMyPNnMo1X

    @Cezar_H_Linux

    23 Jan 2026

    43 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  2. ๐Ÿšจ Critical Security Update: #Oracle Linux 10 ELSA-2026-0697 patches a memory corruption flaw (CVE-2025-68973) in gnupg2. Affects crypto signing & S/MIME. Read more: ๐Ÿ‘‰ https://t.co/5vluBTFkdz #Security https://t.co/WVC39XHWUX

    @Cezar_H_Linux

    16 Jan 2026

    58 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Critical security patch required for #Ubuntu users. A severe vulnerability in GnuPG (CVE-2025-68973 / USN-7946-1) has been disclosed. Read more: ๐Ÿ‘‰ https://t.co/KUuO6sAEHh #Security https://t.co/Yc3O6QaiSG

    @Cezar_H_Linux

    9 Jan 2026

    46 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. Critical security analysis published: #GnuPG vulnerability CVE-2025-68973 exposes fundamental challenges in legacy Linux system maintenance. Read more: ๐Ÿ‘‰ https://t.co/fj0VZXZMwh #Ubuntu #Security https://t.co/n0XM7sGgyP

    @Cezar_H_Linux

    9 Jan 2026

    53 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2025-68973 (CVSS:7.8, HIGH) is Undergoing Analysis. In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leadin..https://t.co/7t3escBCjy #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    2 Jan 2026

    6 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. CVE-2025-68973 (CVSS:7.8, HIGH) is Undergoing Analysis. In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leadin..https://t.co/7t3escBCjy #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    1 Jan 2026

    6 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  7. GnuPG versions through 2.4.8 are affected by an out-of-bounds write vulnerability (CVE-2025-68973) due to crafted input. Update promptly. #GnuPG #Infosec #CVE https://t.co/5KHiW9wxzP

    @pulsepatchio

    30 Dec 2025

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  8. GnuPG through 2.4.8 is vulnerable to an out-of-bounds write (DEBIAN-CVE-2025-68973) due to an indexing error in armor_filter. Monitor for official #gnupg updates. #infosec #vulnerability https://t.co/cbIJI4DZGS

    @pulsepatchio

    29 Dec 2025

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  9. CVE-2025-68973 In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. https://t.co/H7EExGfPFm

    @CVEnew

    28 Dec 2025

    258 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Configurations