CVE-2020-36316

2021-04-0721:15:15

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present.

CPENameOperatorVersion
reliceqrelic-toolkit-0.5.0
reliceqrelic-toolkit-0.4.0

CPE	Name	Operator	Version
	relic	eq	relic-toolkit-0.5.0
	relic	eq	relic-toolkit-0.4.0

References

github.com/relic-toolkit/relic/

github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80

github.com/relic-toolkit/relic/issues/155

github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2