Threats affecting pkg:rpm/suse/osslsigncode

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2025-70888SUSE osslsigncode · Security update for osslsigncode Critical9.8EPSS 0.5%2026-04-07GCVE DatabaseCVE-2025-70888 A security update for osslsigncode addresses multiple vulnerabilities including integer overflows, double-free issues, and memory corruption in APPX and PE file processing. The update also includes fixes for buffer overflows during message digest extraction and improvements in certificate validation and CRL handling. These issues are fixed in osslsigncode version 2.13. EPSS 0.5%Report on CVE-2025-70888 Vulnerability SUSE Product Security Team	GCVE Database	2026-04-07

Page 1 of 1