Unsigned content can be interpreted as a signed.
vulners.com/securityvulns/securityvulns:doc:31998
vulners.com/securityvulns/securityvulns:doc:32121