CVE-2013-4576

CVE-2013-4576 describes a side-channel vulnerability in GnuPG 1.x before 1.4.16, where specific RSA key generation patterns allow physically proximate attackers to extract RSA keys through acoustic cryptanalysis during decryption. This vulnerability has a low CVSS score of 2.1, indicating a local attack vector with low complexity and a potential impact of partial confidentiality loss. While not typically assigned a CVE for acoustic side-channels, GnuPG's developer policy for side-channel resistance warranted its inclusion. There is no evidence of active exploitation, nor is public exploit code available, though it has garnered some community discussion and media coverage.