VendorsOsslsigncode Projectosslsigncodeall versions
Vulnerabilities

Osslsigncode Project Osslsigncode

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component
Published 2026-03-25 · Analyzed
9.8EPSS 0.005
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files.
Published 2023-07-03 · Modified
7.8EPSS 0.003
CVE-2026-39853
osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature Verification
Published 2026-04-09 · Analyzed
7.8EPSS 0.002
CVE-2026-39855
osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read
Published 2026-04-09 · Analyzed
5.5EPSS 0.002
CVE-2026-39856
osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash Calculation
Published 2026-04-09 · Analyzed
5.5EPSS 0.002