CVE-2026-41989

Libgcrypt versions prior to 1.12.2 may permit a heap-based buffer overflow, leading to a denial of service. This vulnerability can be exploited by using specially crafted ECDH ciphertext with the gcry_pk_decrypt function.