CVE-2025-30258
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."
Vendor
Product
CWE
Yayın Tarihi
2025-03-19 20:15:20
Güncelleme
2025-10-16 16:53:07
Source Identifier
cve@mitre.org
KEV Date Added
-