CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.7. See the original NVD description below for full technical details.
CVE
CVE-2025-30258
Severity
LOW
CVSS
2.7
EPSS
0.18%
Original NVD Description
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."
Related CVEs
Other vulnerabilities affecting the same vendor(s)