CVE-2025-67897CWE-195

CVE-2025-67897

Medium · published December 14, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00354 · 28.0th percentile
Weakness
CWE-195 · Signed to Unsigned Conversion Error
Published
2025-12-14T10:16Z
References (3)
https://bugs.debian.org/1122582 · [email protected]https://gitlab.com/sequoia-pgp/sequoia/-/blob/b59886e5e7bdf7169ed330f309a6633d131776e5/openpgp/NEWS#L7-L26 · [email protected]https://gitlab.com/sequoia-pgp/sequoia/-/commit/b59886e5e7bdf7169ed330f309a6633d131776e5 · [email protected]
EPSS history
Timeline
  • 14 DEC 04:35Z
    In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short
    cvelistv5