GnuPG — Vulnerabilities & Security Advisories 9

GnuPG serves as the primary open-source implementation of the OpenPGP standard for secure communication and data protection through encryption and digital signatures. Historically, vulnerabilities have included remote code execution flaws, memory corruption issues, and privilege escalation risks, particularly in parsing functions and cryptographic operations. While generally robust, the software has faced notable security incidents such as the EFAIL vulnerability and the DROWN attack affecting older versions, though these were mitigated through updates. The project maintains a strong security focus with regular audits and patches, though its complexity occasionally introduces new CVEs, currently standing at nine documented vulnerabilities that highlight the challenges in maintaining cryptographic software security.