CVE-2026-103902

7.5 Élevée

Publiée le 12/10/2026 à 13:17 · Modifiée le 16/10/2026 à 22:04 · Analyse NVD reportée · Source : a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Description

Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS. The vulnerability allows an attacker to create forged digital signatures that are displayed a valid by affected DigiDoc software.This issue affects libdigidocpp: from 4.0.0 before 4.5.0; DigiDoc4: from 4.6.0 before 4.11.0; DigiDoc Android: from 2.7.0 before 3.1.0; DigiDoc iOS: from 2.7.0 before 3.1.0.

Traduire en français

Produits concernés

DigiDoc libdigidocpp
DigiDoc4
DigiDoc Android
DigiDoc iOS

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	a6d3dc9e-0591-4a13-bce7-0f5b31ff6158	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-347

Références

https://github.com/open-eid/libdigidocpp/pull/735
https://www.id.ee/en/article/id-tarkvara-uus-versioon-267-on-avalikustatud/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories