CVE-2021-3345: Gnupg Libgcrypt

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.

Affected products

• Gnupg Libgcrypt: version 1.9.0 only
• Oracle Communications Billing And Revenue Management: version 12.0.0.3.0 only

Published 2021-01-29. Last modified 2026-06-17.