CVE-2008-7272: Getfiregpg Firegpg

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users’s private key.

Affected products

• Getfiregpg Firegpg: before 0.6 (fixed in 0.6)

Published 2019-11-08. Last modified 2026-06-16.