CVE-2020-36315

In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of the first two bytes) are inadequate. NOTE: this requires that a low public exponent (such as 3) is being used. The product, by default, does not generate RSA keys with such a low number.

• CWE-327

• https://github.com/relic-toolkit/relic/Third Party Advisory
• https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80Patch, Third Party Advisory
• https://github.com/relic-toolkit/relic/issues/154Exploit, Third Party Advisory
• https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2Third Party Advisory
• https://github.com/relic-toolkit/relic/Third Party Advisory
• https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80Patch, Third Party Advisory
• https://github.com/relic-toolkit/relic/issues/154Exploit, Third Party Advisory
• https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2Third Party Advisory

Published

Apr 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3631Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-36310An issue was discovered in the Linux kernel before 5.8. arch…5.5
• CVE-2020-36311An issue was discovered in the Linux kernel before 5.9. arch…5.5
• CVE-2020-36312An issue was discovered in the Linux kernel before 5.8.10. v…5.5
• CVE-2020-36313An issue was discovered in the Linux kernel before 5.7. The …7.8
• CVE-2020-36314fr-archive-libarchive.c in GNOME file-roller through 3.38.0,…3.9
• CVE-2020-36316In RELIC before 2021-04-03, there is a buffer overflow in PK…5.5
• CVE-2020-36317In the standard library in Rust before 1.49.0, String::retai…7.5
• CVE-2020-36318In the standard library in Rust before 1.49.0, VecDeque::mak…9.8
• CVE-2020-36319Insecure configuration of default ObjectMapper in com.vaadin…6.5
• CVE-2020-3632u'Incorrect validation of ring context fetched from host mem…7.8
• CVE-2020-36320Unsafe validation RegEx in EmailValidator class in com.vaadi…7.5