CVE-2019-12904

CVE-2019-12904 describes a flush-and-reload side-channel vulnerability in the C implementation of AES within Libgcrypt 1.8.4, affecting products like GnuPG and openSUSE. This medium-severity vulnerability (CVSS 5.9) has a network attack vector and high attack complexity, potentially allowing an attacker to compromise confidentiality. Despite the vendor's inability to validate an attack, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.