CVE-2020-36315: Relic Project Relic

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of the first two bytes) are inadequate. NOTE: this requires that a low public exponent (such as 3) is being used. The product, by default, does not generate RSA keys with such a low number.

Affected products

• Relic Project Relic: before 2020-08-01 (fixed in 2020-08-01)

Published 2021-04-07. Last modified 2026-06-17.