Gpgme Project Gpgme vulnerabilities

1 known vulnerability affecting gpgme_project/gpgme.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-8945HIGHCVSS 7.5fixed in 0.1.12020-02-12

CVE-2020-8945 [HIGH] CWE-416 CVE-2020-8945: The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated b The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.