It was reported  that GnuPG2 keyring DB code did not reject packets which don't belong into a keyring, which may lead to invalid read of sizeof (int).
It was fixed by the below upstream commit:
Created gnupg2 tracking bugs for this issue:
Affects: fedora-all [bug 1193011]
Created gnupg tracking bugs for this issue:
Affects: fedora-all [bug 1193010]
In order to exploit this flaw, one would need specially-crafted gpg keyring files. This would result in a OOB read condition and gpg2 binary would crash.
Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.