CVE-2026-41989 | gnupg Libgcrypt up to 1.10.3/1.11.2/1.12.1 ECDH gcry_pk_decrypt out-of-bounds write

A vulnerability was found in gnupg Libgcrypt up to 1.10.3/1.11.2/1.12.1 and classified as critical. Affected by this issue is the function gcry_pk_decrypt of the component ECDH Handler. The manipulation results in out-of-bounds write.

This vulnerability was named CVE-2026-41989. The attack needs to be approached locally. There is no available exploit.

It is suggested to upgrade the affected component.