5.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.4%
The function CMS_verify() does not correctly handle an error condition involving malformed signed attributes. This will cause an invalid set of signed attributes to appear valid and content digests will not be checked.