CVE-2026-41989Published
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-41989 · Microsoft / collected KEV context
cve-program · CVE-2026-41989
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.