Skip to content
Fencer Vulns
medium 5.3

CVE-2025-67897 json

Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too short

published 2025-11-07 12 mo ago modified 2026-10-14 26 d ago also GHSA-v6x3-9r38-r27q , RUSTSEC-2025-0136 , EUVD-2025-203279

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 29%
public exploits
0
none known

Summary

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.

Patch / fix

  • crates.io sequoia-openpgp 2.1.0
  • sequoia-pgp sequoia 2.1.0
  • rust-sequoia-openpgp Debian 13 2.0.0-2+deb13u1
  • rust-sequoia-openpgp Debian 14 2.1.0-1

debian advisories DEBIAN-CVE-2025-67897

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-67897 updated cvss 5.3

Sequoia: Sequoia: Application crash via crafted encrypted message

  • Red Hat Confidential Compute Attestation openshift-sandboxed-containers/osc-monitor-rhel9, openshift-sandboxed-containers/osc-rhel9-operator, openshift-sandboxed-containers/osc-operator-bundle, openshift-sandboxed-containers/osc-podvm-builder-rhel9, openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat Enterprise Linux 9 rpm-sequoia, rust-rpm-sequoia, trustee-guest-components Red Hat Enterprise Linux 10 rust-sequoia-sq, rust-rpm-sequoia, rust-sequoia-sqv, trustee-guest-components Red Hat OpenShift Container Platform 4 kata-containers Red Hat Trusted Profile Analyzer rhtpa/rhtpa-trustification-service-rhel9
    affected: workaround, no fix available “Fix deferred”

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
10 mo ago

Exploit prediction

0.35% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
OSV 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
GitHub 3.1 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected packages

ecosystem package affected fixed in
crates.io sequoia-openpgp
<2.1.0
>=0.0.0-0, <2.1.0
2.1.0

Affected products

  • sequoia-pgp sequoia

Classification

Weakness
  • CWE-195 Signed to Unsigned Conversion Error

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.