A vulnerability in wolfSSL's OpenSSL compatibility builds causes the function wolfSSL_PKCS7_verify() to incorrectly return success when verifying degenerate PKCS#7 objects that contain no signer. This allows signed-data verification to succeed without authenticating any content if the PKCS#7 object has empty signerInfos. The issue affects only the compatibility-layer verify path and has been fixed by rejecting such objects when no valid signer signature is verified, regardless of the PKCS7_NOVERIFY flag.