{"id":"EUVD-2024-3456","enisaUuid":"80b861ce-da1d-3993-b57a-62c5a42df3cd","description":"rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.","datePublished":"Dec 5, 2024, 3:24:36 PM","dateUpdated":"Dec 9, 2024, 8:23:09 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv\n","aliases":"CVE-2024-53856\nGHSA-9rmp-2568-59rv\n","assigner":"GitHub_M","epss":0.47,"enisaIdProduct":[{"id":"c1f3e7c5-f9d9-3417-acc7-faf2c6ac61d5","product":{"name":"rpgp","vendor":{"name":"rpgp"}},"product_version":"\u003c 0.14.1"}],"enisaIdVendor":[{"id":"09e9ae5d-4943-31aa-b25d-639eb51b678b","vendor":{"name":"rpgp"}}],"enisaIdVulnerability":[{"id":"d3002635-eaea-3411-bec9-4aaf271a653e","vulnerability":{"id":"GHSA-9rmp-2568-59rv","description":"rPGP Panics on Malformed Untrusted Input","datePublished":"Dec 5, 2024, 5:30:52 PM","dateUpdated":"Dec 26, 2025, 4:30:25 PM","baseScore":0.0,"references":"https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-53856\nhttps://github.com/rpgp/rpgp\nhttps://rustsec.org/advisories/RUSTSEC-2024-0447.html\n","enisa_id":"EUVD-2024-3456\n","aliases":"CVE-2024-53856\nGHSA-9rmp-2568-59rv\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:53:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f78891dc-33bc-31f4-a12d-f4587cfd2065","vulnerability":{"id":"CVE-2024-53856","description":"rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.","datePublished":"Dec 5, 2024, 3:24:36 PM","dateUpdated":"Dec 9, 2024, 8:23:09 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv\n","enisa_id":"EUVD-2024-3456\n","assigner":"GitHub_M","epss":0.47,"dataProcessed":"Nov 2, 2026, 7:19:17 AM","vulnerabilityProduct":[{"id":"0a34a6d6-8a5d-47d7-a0e5-bf18ca4d861b","product":{"name":"rpgp","vendor":{"name":"rpgp"}},"product_version":"\u003c 0.14.1"},{"id":"4e1d29d5-5249-3c94-bea2-a0bb27198672","product":{"name":"rpgp","vendor":{"name":"rpgp"}},"product_version":"\u003c 0.14.1"}],"vulnerabilityVendor":[{"id":"fb41f3f7-c0f2-3b29-83c3-57bf0853d517","vendor":{"name":"rpgp"}}]}}],"enisaIdAdvisory":[]}