CVE-2026-39855

creationtimestamp| type| source ---|---|--- 2026-04-09 20:21:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3n4c2qtk2q...

CVE-2026-39855

osslsigncode prior to 2.13 contains an integer underflow in the PE page-hash calculation (pe_page_hash_calc). If SizeOfHeaders (hdrsize) > SectionAlignment (pagesize), hdrsize is subtracted from pagesize without validation, producing a large unsigned length. The code allocates a zero-filled bu...