What’s Vulnerable › Vulnerabilities

CVE-2020-36316

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-07 · updated 2026-06-17
• Weakness: CWE-120

Description

In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present.

Affected products

• Relic Project Relic: before 2021-04-03 — fixed in 2021-04-03

How to fix

Upgrade to a fixed version: Relic Project Relic 2021-04-03. Check the vendor advisory for mitigations.

References

• https://github.com/relic-toolkit/relic/
• https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80
• https://github.com/relic-toolkit/relic/issues/155
• https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2
• https://github.com/relic-toolkit/relic/
• https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80
• https://github.com/relic-toolkit/relic/issues/155
• https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2

Get alerted when CVE-2020-36316 or the next vulnerability affects your stack