Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2026-59112

Signature validation vulnerability affecting DigiDoc applications

Description

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Estonian Information System Authority (RIA) libdigidocpp

Default version status: unaffected

  • 4.1.0 to < 4.2.1affected

Estonian Information System Authority (RIA) DigiDoc4

Default version status: unaffected

  • 4.7.0 to < 4.8.2affected

Estonian Information System Authority (RIA) DigiDoc

Default version status: unaffected

  • 2.7.0 to < 2.7.2affected

Estonian Information System Authority (RIA) DigiDoc

Default version status: unaffected

  • 2.8.0 to < 2.8.1affected

References