HOME VULNERABILITIESCVE-2020-25125

HIGH

CVE-2020-25125

CWE-120Published: September 3, 2020· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.

Technical Analysis

CVE-2020-25125 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.None

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Vendors & Products

gnupg1 product(s)

gnupg

gpg4win1 product(s)

gpg4win

Source: NVD CPE · 3 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://dev.gnupg.org/rG8ec9573e57866dda5efb4677d4454161517484bc

PATCHhttps://dev.gnupg.org/rG8ec9573e57866dda5efb4677d4454161517484bc

ADVISORYhttp://www.openwall.com/lists/oss-security/2020/09/03/4

ADVISORYhttp://www.openwall.com/lists/oss-security/2020/09/03/5

ADVISORYhttps://bugzilla.opensuse.org/show_bug.cgi?id=1176034

ADVISORYhttps://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.html

ADVISORYhttp://www.openwall.com/lists/oss-security/2020/09/03/4

ADVISORYhttp://www.openwall.com/lists/oss-security/2020/09/03/5

ADVISORYhttps://bugzilla.opensuse.org/show_bug.cgi?id=1176034

ADVISORYhttps://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.html

All References (12)

→

http://www.openwall.com/lists/oss-security/2020/09/03/4Mailing List · Third Party Advisory

→

http://www.openwall.com/lists/oss-security/2020/09/03/5Mailing List · Third Party Advisory

→

https://bugzilla.opensuse.org/show_bug.cgi?id=1176034Exploit · Issue Tracking · Third Party Advisory

→

https://dev.gnupg.org/T5050Mailing List

→

https://dev.gnupg.org/rG8ec9573e57866dda5efb4677d4454161517484bcPatch · Vendor Advisory

→

https://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.htmlVendor Advisory

→

http://www.openwall.com/lists/oss-security/2020/09/03/4Mailing List · Third Party Advisory

→

http://www.openwall.com/lists/oss-security/2020/09/03/5Mailing List · Third Party Advisory

→

https://bugzilla.opensuse.org/show_bug.cgi?id=1176034Exploit · Issue Tracking · Third Party Advisory

→

https://dev.gnupg.org/T5050Mailing List

→

https://dev.gnupg.org/rG8ec9573e57866dda5efb4677d4454161517484bcPatch · Vendor Advisory

→

https://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.htmlVendor Advisory

Quick Facts

CVE IDCVE-2020-25125

CVSS Score7.8 / 10

SeverityHIGH

WeaknessCWE-120

CISA KEVNo

Affected2 vendor(s)

PublishedSep 3, 2020

Related CVEs (CWE-120)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2020-25125 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2020-25125·NVD