CVE-2006-6235: GNU Privacy Guard

High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days.

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Affected products

• GNU Privacy Guard: version 1.2.4 only; version 1.2.5 only; version 1.2.6 only; version 1.2.7 only; version 1.3.3 only; version 1.3.4 only; …
• GPG4WIN GPG4WIN: version 1.0.7 only
• Red Hat Enterprise Linux: version 4.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only; version 4.0 only
• Red Hat Fedora Core: version core_5.0 only; version core6 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Rpath Linux: version 1 only
• Slackware Slackware Linux: version 11.0 only
• Ubuntu Ubuntu Linux: version 5.10 only; version 6.06 only

Published 2006-12-07. Last modified 2026-06-16.