CVE-2024-53857

Summary

CVE-2024-53857 is a newly disclosed vulnerability affecting the rPGP OpenPGP implementation in Rust. Prior to version 0.14.1, rPGP is susceptible to resource exhaustion attacks. An attacker can exploit this issue by crafting messages to cause excessive consumption of resources during general message parsing and decryption with symmetric keys. This vulnerability poses a risk to systems relying on rPGP for secure data transmission and encryption. Upgrading to the latest version is strongly recommended to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.