There is a heap buffer overflow in libgcrypt due to an
incorrect assumption in the block buffer management code. Just
decrypting some data can overflow a heap buffer with attacker
controlled data and no verification or signature is validated
before the vulnerability occurs.
