A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...
7.3CVSS5.9AI score
SaveExploits0References6
Cvelist•added 2025/02/04 8:1 p.m.•35 views
CVE-2025-0509 Signing Checks Bypass
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...
