VDB
GCVE-110-NCSC-2026-431
GCVE-110-NCSC-2026-431
Advisory PublishedCVSS 8.1/10
GnuTLS versions prior to 3.8.13 contain a timing side-channel vulnerability in the PKCS#7 padding check during decryption that can leak sensitive padding information to remote attackers.
Weaknesses (CWE)
CWE-825Expired Pointer DereferenceCWE-190Integer Overflow or WraparoundCWE-416Use After FreeCWE-1288Improper Validation of Consistency within InputCWE-401Missing Release of Memory after Effective LifetimeCWE-772Missing Release of Resource after Effective LifetimeCWE-908Use of Uninitialized ResourceCWE-911Improper Update of Reference CountCWE-390Detection of Error Condition Without ActionCWE-476NULL Pointer DereferenceCWE-762Mismatched Memory Management RoutinesCWE-121Stack-based Buffer OverflowCWE-354Improper Validation of Integrity Check ValueCWE-606Unchecked Input for Loop ConditionCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-787Out-of-bounds WriteCWE-820Missing SynchronizationCWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-674Uncontrolled RecursionCWE-122Heap-based Buffer OverflowCWE-863Incorrect AuthorizationCWE-125Out-of-bounds ReadCWE-347Improper Verification of Cryptographic SignatureCWE-611Improper Restriction of XML External Entity ReferenceCWE-770Allocation of Resources Without Limits or ThrottlingCWE-405Asymmetric Resource Consumption (Amplification)CWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-124Buffer Underwrite ('Buffer Underflow')CWE-758Reliance on Undefined, Unspecified, or Implementation-Defined BehaviorCWE-824Access of Uninitialized PointerCWE-617Reachable AssertionCWE-131Incorrect Calculation of Buffer SizeCWE-191Integer Underflow (Wrap or Wraparound)CWE-179Incorrect Behavior Order: Early ValidationCWE-822Untrusted Pointer DereferenceCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-366Race Condition within a ThreadCWE-763Release of Invalid Pointer or ReferenceCWE-1285Improper Validation of Specified Index, Position, or Offset in InputCWE-1287Improper Validation of Specified Type of InputCWE-130Improper Handling of Length Parameter InconsistencyCWE-178Improper Handling of Case SensitivityCWE-696Incorrect Behavior OrderCWE-475Undefined Behavior for Input to APICWE-626Null Byte Interaction Error (Poison Null Byte)CWE-295Improper Certificate ValidationCWE-1284Improper Validation of Specified Quantity in InputCWE-193Off-by-one ErrorCWE-459Incomplete CleanupCWE-123Write-what-where ConditionCWE-909Missing Initialization of ResourceCWE-789Memory Allocation with Excessive Size ValueCWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')CWE-838Inappropriate Encoding for Output ContextCWE-415Double FreeCWE-280Improper Handling of Insufficient Permissions or PrivilegesCWE-1333Inefficient Regular Expression ComplexityCWE-297Improper Validation of Certificate with Host MismatchCWE-364Signal Handler Race ConditionCWE-208Observable Timing DiscrepancyCWE-187Partial String ComparisonCWE-407Inefficient Algorithmic ComplexityCWE-126Buffer Over-readCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-358Improperly Implemented Security Check for StandardCWE-266Incorrect Privilege AssignmentCWE-248Uncaught ExceptionCWE-91XML Injection (aka Blind XPath Injection)
Risk Scores
CVSS 3.1
8.1/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| IBM | vers:unknown/* | — | — |
Aliases
CVE-2023-53781CVE-2025-14087CVE-2025-14512CVE-2025-21858CVE-2025-22105CVE-2025-37980CVE-2025-38015CVE-2025-38097CVE-2025-38180CVE-2025-38400CVE-2025-38405CVE-2025-38441CVE-2025-38470CVE-2025-38653CVE-2025-39766CVE-2025-39797CVE-2025-39866CVE-2025-40134CVE-2025-48431CVE-2025-5278CVE-2025-68183CVE-2025-68211CVE-2025-68214CVE-2025-68347CVE-2025-68366CVE-2025-68724CVE-2025-71066CVE-2025-71089CVE-2026-12143CVE-2026-13257CVE-2026-13258CVE-2026-13757CVE-2026-14269CVE-2026-14273CVE-2026-14496CVE-2026-14497CVE-2026-14502CVE-2026-14507CVE-2026-14508CVE-2026-14509CVE-2026-14888CVE-2026-14905CVE-2026-14988CVE-2026-14990CVE-2026-14991CVE-2026-14992CVE-2026-14999CVE-2026-15588CVE-2026-15762CVE-2026-15781CVE-2026-15784CVE-2026-15819CVE-2026-15822CVE-2026-15824CVE-2026-16111CVE-2026-16159CVE-2026-16161CVE-2026-16163CVE-2026-16164CVE-2026-16165CVE-2026-16167CVE-2026-16169CVE-2026-16170CVE-2026-16176CVE-2026-16177CVE-2026-16178CVE-2026-16179CVE-2026-16181CVE-2026-16182CVE-2026-16340CVE-2026-16439CVE-2026-16440CVE-2026-16441CVE-2026-2100CVE-2026-22979CVE-2026-22984CVE-2026-22990CVE-2026-23002CVE-2026-23060CVE-2026-23110CVE-2026-23204CVE-2026-23209CVE-2026-23216CVE-2026-23243CVE-2026-23270CVE-2026-23392CVE-2026-23455CVE-2026-2391CVE-2026-31411CVE-2026-31419CVE-2026-31488CVE-2026-31508CVE-2026-31532CVE-2026-31581CVE-2026-31607CVE-2026-31613CVE-2026-31669CVE-2026-31677CVE-2026-31684CVE-2026-31685CVE-2026-33845CVE-2026-33846CVE-2026-3832CVE-2026-3833CVE-2026-4046CVE-2026-41254CVE-2026-41602CVE-2026-41606CVE-2026-41607CVE-2026-42009CVE-2026-42010CVE-2026-42011CVE-2026-42012CVE-2026-42013CVE-2026-42014CVE-2026-42015CVE-2026-43027CVE-2026-43037CVE-2026-43038CVE-2026-43056CVE-2026-43074CVE-2026-43116CVE-2026-43125CVE-2026-43163CVE-2026-43190CVE-2026-43198CVE-2026-43260CVE-2026-43284CVE-2026-43303CVE-2026-43329CVE-2026-43499CVE-2026-43501CVE-2026-43868CVE-2026-43870CVE-2026-4437CVE-2026-4438CVE-2026-45852CVE-2026-46054CVE-2026-46086CVE-2026-46116CVE-2026-46173CVE-2026-46181CVE-2026-46242CVE-2026-46259CVE-2026-46300CVE-2026-46331CVE-2026-46333CVE-2026-46917CVE-2026-46968CVE-2026-47010CVE-2026-47021CVE-2026-47027CVE-2026-47059CVE-2026-47063CVE-2026-48144CVE-2026-48145CVE-2026-5260CVE-2026-52923CVE-2026-52991CVE-2026-53006CVE-2026-53009CVE-2026-53131CVE-2026-53189CVE-2026-53264CVE-2026-53266CVE-2026-5419CVE-2026-5450CVE-2026-55602CVE-2026-55603CVE-2026-55968CVE-2026-55970CVE-2026-58010CVE-2026-58011CVE-2026-58012CVE-2026-58013CVE-2026-58014CVE-2026-58015CVE-2026-58016CVE-2026-58662CVE-2026-59879CVE-2026-59880CVE-2026-60147CVE-2026-60589CVE-2026-61308CVE-2026-63913CVE-2026-63952CVE-2026-64017CVE-2026-64530CVE-2026-64560CVE-2026-70906CVE-2026-70907CVE-2026-74581CVE-2026-82417CVE-2026-82562CVE-2026-83605CVE-2026-83607CVE-2026-83608CVE-2026-83613CVE-2026-83614CVE-2026-83615CVE-2026-83616CVE-2026-83619
References
Browse GCVE Records
5,487 records in the GCVE database · Updated October 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.