Skip to content
OpenAdvisories

Vendor

trailofbits

15 known vulnerabilities.

Products

fickling 11 rfc3161-client 2 uthenticode 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-52556

    rfc3161-client has insufficient verification for timestamp response signatures

    rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR…

    trailofbits rfc3161-client rfc3161-client PyPI
  • Critical 9.1
    CVE-2023-39969

    uthenticode signature validation bypass vulnerability

    uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode specification. As a re…

    trailofbits uthenticode