CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation.

Published Mar 6, 2024 · updated Oct 15, 2026

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

Mar 6, 2024 · NIST NVD
Detected
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.
Oct 15, 2026 · NIST NVD
Updated
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Sources

CVE.orgVulnerability recordCVE-2024-2236
Official CVE identifier
cve.org
FIRST EPSSExploitation probabilityCVE-2024-2236
30-day exploitation probability 1.1%
first.org
NIST NVDVulnerability recordCVE-2024-2236
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.
nvd.nist.gov