VDB

GCVE-110-NCSC-2026-431

GCVE-110-NCSC-2026-431
Advisory PublishedCVSS 8.1/10
Vulnetix · Advisory published October 16, 2026
GnuTLS versions prior to 3.8.13 contain a timing side-channel vulnerability in the PKCS#7 padding check during decryption that can leak sensitive padding information to remote attackers.

Weaknesses (CWE)

CWE-825Expired Pointer DereferenceCWE-190Integer Overflow or WraparoundCWE-416Use After FreeCWE-1288Improper Validation of Consistency within InputCWE-401Missing Release of Memory after Effective LifetimeCWE-772Missing Release of Resource after Effective LifetimeCWE-908Use of Uninitialized ResourceCWE-911Improper Update of Reference CountCWE-390Detection of Error Condition Without ActionCWE-476NULL Pointer DereferenceCWE-762Mismatched Memory Management RoutinesCWE-121Stack-based Buffer OverflowCWE-354Improper Validation of Integrity Check ValueCWE-606Unchecked Input for Loop ConditionCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-787Out-of-bounds WriteCWE-820Missing SynchronizationCWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-674Uncontrolled RecursionCWE-122Heap-based Buffer OverflowCWE-863Incorrect AuthorizationCWE-125Out-of-bounds ReadCWE-347Improper Verification of Cryptographic SignatureCWE-611Improper Restriction of XML External Entity ReferenceCWE-770Allocation of Resources Without Limits or ThrottlingCWE-405Asymmetric Resource Consumption (Amplification)CWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-124Buffer Underwrite ('Buffer Underflow')CWE-758Reliance on Undefined, Unspecified, or Implementation-Defined BehaviorCWE-824Access of Uninitialized PointerCWE-617Reachable AssertionCWE-131Incorrect Calculation of Buffer SizeCWE-191Integer Underflow (Wrap or Wraparound)CWE-179Incorrect Behavior Order: Early ValidationCWE-822Untrusted Pointer DereferenceCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-366Race Condition within a ThreadCWE-763Release of Invalid Pointer or ReferenceCWE-1285Improper Validation of Specified Index, Position, or Offset in InputCWE-1287Improper Validation of Specified Type of InputCWE-130Improper Handling of Length Parameter InconsistencyCWE-178Improper Handling of Case SensitivityCWE-696Incorrect Behavior OrderCWE-475Undefined Behavior for Input to APICWE-626Null Byte Interaction Error (Poison Null Byte)CWE-295Improper Certificate ValidationCWE-1284Improper Validation of Specified Quantity in InputCWE-193Off-by-one ErrorCWE-459Incomplete CleanupCWE-123Write-what-where ConditionCWE-909Missing Initialization of ResourceCWE-789Memory Allocation with Excessive Size ValueCWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')CWE-838Inappropriate Encoding for Output ContextCWE-415Double FreeCWE-280Improper Handling of Insufficient Permissions or PrivilegesCWE-1333Inefficient Regular Expression ComplexityCWE-297Improper Validation of Certificate with Host MismatchCWE-364Signal Handler Race ConditionCWE-208Observable Timing DiscrepancyCWE-187Partial String ComparisonCWE-407Inefficient Algorithmic ComplexityCWE-126Buffer Over-readCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-358Improperly Implemented Security Check for StandardCWE-266Incorrect Privilege AssignmentCWE-248Uncaught ExceptionCWE-91XML Injection (aka Blind XPath Injection)

Risk Scores

CVSS 3.1
8.1/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersionsPlatforms
IBMvers:unknown/*——

Aliases

CVE-2023-53781CVE-2025-14087CVE-2025-14512CVE-2025-21858CVE-2025-22105CVE-2025-37980CVE-2025-38015CVE-2025-38097CVE-2025-38180CVE-2025-38400CVE-2025-38405CVE-2025-38441CVE-2025-38470CVE-2025-38653CVE-2025-39766CVE-2025-39797CVE-2025-39866CVE-2025-40134CVE-2025-48431CVE-2025-5278CVE-2025-68183CVE-2025-68211CVE-2025-68214CVE-2025-68347CVE-2025-68366CVE-2025-68724CVE-2025-71066CVE-2025-71089CVE-2026-12143CVE-2026-13257CVE-2026-13258CVE-2026-13757CVE-2026-14269CVE-2026-14273CVE-2026-14496CVE-2026-14497CVE-2026-14502CVE-2026-14507CVE-2026-14508CVE-2026-14509CVE-2026-14888CVE-2026-14905CVE-2026-14988CVE-2026-14990CVE-2026-14991CVE-2026-14992CVE-2026-14999CVE-2026-15588CVE-2026-15762CVE-2026-15781CVE-2026-15784CVE-2026-15819CVE-2026-15822CVE-2026-15824CVE-2026-16111CVE-2026-16159CVE-2026-16161CVE-2026-16163CVE-2026-16164CVE-2026-16165CVE-2026-16167CVE-2026-16169CVE-2026-16170CVE-2026-16176CVE-2026-16177CVE-2026-16178CVE-2026-16179CVE-2026-16181CVE-2026-16182CVE-2026-16340CVE-2026-16439CVE-2026-16440CVE-2026-16441CVE-2026-2100CVE-2026-22979CVE-2026-22984CVE-2026-22990CVE-2026-23002CVE-2026-23060CVE-2026-23110CVE-2026-23204CVE-2026-23209CVE-2026-23216CVE-2026-23243CVE-2026-23270CVE-2026-23392CVE-2026-23455CVE-2026-2391CVE-2026-31411CVE-2026-31419CVE-2026-31488CVE-2026-31508CVE-2026-31532CVE-2026-31581CVE-2026-31607CVE-2026-31613CVE-2026-31669CVE-2026-31677CVE-2026-31684CVE-2026-31685CVE-2026-33845CVE-2026-33846CVE-2026-3832CVE-2026-3833CVE-2026-4046CVE-2026-41254CVE-2026-41602CVE-2026-41606CVE-2026-41607CVE-2026-42009CVE-2026-42010CVE-2026-42011CVE-2026-42012CVE-2026-42013CVE-2026-42014CVE-2026-42015CVE-2026-43027CVE-2026-43037CVE-2026-43038CVE-2026-43056CVE-2026-43074CVE-2026-43116CVE-2026-43125CVE-2026-43163CVE-2026-43190CVE-2026-43198CVE-2026-43260CVE-2026-43284CVE-2026-43303CVE-2026-43329CVE-2026-43499CVE-2026-43501CVE-2026-43868CVE-2026-43870CVE-2026-4437CVE-2026-4438CVE-2026-45852CVE-2026-46054CVE-2026-46086CVE-2026-46116CVE-2026-46173CVE-2026-46181CVE-2026-46242CVE-2026-46259CVE-2026-46300CVE-2026-46331CVE-2026-46333CVE-2026-46917CVE-2026-46968CVE-2026-47010CVE-2026-47021CVE-2026-47027CVE-2026-47059CVE-2026-47063CVE-2026-48144CVE-2026-48145CVE-2026-5260CVE-2026-52923CVE-2026-52991CVE-2026-53006CVE-2026-53009CVE-2026-53131CVE-2026-53189CVE-2026-53264CVE-2026-53266CVE-2026-5419CVE-2026-5450CVE-2026-55602CVE-2026-55603CVE-2026-55968CVE-2026-55970CVE-2026-58010CVE-2026-58011CVE-2026-58012CVE-2026-58013CVE-2026-58014CVE-2026-58015CVE-2026-58016CVE-2026-58662CVE-2026-59879CVE-2026-59880CVE-2026-60147CVE-2026-60589CVE-2026-61308CVE-2026-63913CVE-2026-63952CVE-2026-64017CVE-2026-64530CVE-2026-64560CVE-2026-70906CVE-2026-70907CVE-2026-74581CVE-2026-82417CVE-2026-82562CVE-2026-83605CVE-2026-83607CVE-2026-83608CVE-2026-83613CVE-2026-83614CVE-2026-83615CVE-2026-83616CVE-2026-83619

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

5,487 records in the GCVE database · Updated October 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›