CVE-2025-30258
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses th…
Published: 2025-03-19 · CVSS: 2.7 · CVSS 3.1
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7