CVE-2020-24972

PoC —

CVSS 3.1

8.8 high

EPSS

5%p91

Published

Aug 29, 2020 (Aug 29, 2020)

Modified

Jun 17, 2026

Description

The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.

Vendors: kleopatra project fedoraproject opensuse
Products: kleopatra, fedora, backports sle, leap
Weakness: CWE-116
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news0 stories

No ingested article mentions this CVE yet.