CyberRota Analysis
AI-GeneratedThe vulnerability affects the Estonian Information System Authority's libdigidocpp and its associated DigiDoc applications on Android and iOS, due to improper verification of cryptographic signatures and checks for exceptional conditions. This flaw could potentially lead to unauthorized access or manipulation of sensitive data, posing a risk to users relying on these applications for secure document handling. Organizations utilizing these affected versions should prioritize remediation to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.