{"id":"CVE-2020-36316","details":"In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present.","modified":"2026-07-08T19:44:30.168351Z","published":"2021-04-07T21:15:15.933Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"2021-04-03"}],"source":"CPE_RANGE","vendor_product":"relic_project:relic","cpes":["cpe:2.3:a:relic_project:relic:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"fixed":"2021-04-03"}],"source":"DESCRIPTION"}]},"references":[{"type":"ADVISORY","url":"https://github.com/relic-toolkit/relic/"},{"type":"ADVISORY","url":"https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2"},{"type":"FIX","url":"https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80"},{"type":"FIX","url":"https://github.com/relic-toolkit/relic/issues/155"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/relic-toolkit/relic","events":[{"introduced":"0"},{"fixed":"76c9a1fdf19d9e92e566a77376673e522aae9f80"}],"database_specific":{"source":"REFERENCES"}}],"versions":["relic-toolkit-0.5.0","relic-toolkit-0.4.0"],"database_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"69657987524564636029535107011666586778","length":3389},"id":"CVE-2020-36316-28f9ddf1","signature_type":"Function","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80","target":{"file":"src/cp/relic_cp_rsa.c","function":"pad_pkcs1"}},{"deprecated":false,"digest":{"line_hashes":["176999641168755905788768045896499671049","74783240671282190672271361349882345348","176723442613648384338233460164271321788","294432505293137735722343447872286710285","268162463894706134361579155470333805242","321495150006894071367042592449401519075","214031401099938154895451053399372112638","127589012025454628157139890586018595238","243469124743432876710305694229026463292","300746572558732625302601277932745638334","320946319132114463535112759167331362879","205831021259119913990990917088159697522","252014268913482632074802215439059149515","257853496364686983710324393625378027850","189487864189060317300793759766524930847","284105826758362605834986465567384060991","52090692321342227819024359639513987911","114639030673563402080214300261229884896","304263314638063041891213352202038779285","39861785282792548728985415521757370500","244227412663048728943245093838192530967","71728752278568053299011282484131662209","9619257733797698653810254936259396843","104344525641221576370228563130532433218","175562115085806860254177535346311373489","59230706511690997389992675793244113206","227188692718352635339371063222477520952","97329313909089951908811274292453467375","216542705124302817088270099936003884483","7733801303813526248160289426848155002","328449221763997800467760181019065561074","218203412603636142080969475454982524525","270327764936296466011869386410522672030","210444788085239497161001174539367366518","90787549932364645469273279741758775015","300746572558732625302601277932745638334","320946319132114463535112759167331362879","226814070907338472034763529982624929643","54918971806828564430054993294184776992","301992744173651404076094312165253960736","269792656340272394693323755228770874039","170205691752568514629617845835640033399","47355852448220394792452224727004069369","119366608951561752882182264989136692522","198417074384324357349202987187459479249","322362946218057680321036918247693849727","272244035529281744367980305555753917550","213945344902666604977809375415103803599","209167455294509237089794457863428978816","287184312953108992851729164489875176050","327887661744444931927532843055323241534","128124206666282504699246336781833592912","76751374439448529389163149803574416778","200913858063916283820781819286554577899","211127066634986981543305359363527596134","304635309418604517957519510608551965969","7894321107815600658076663106801253226","337937090123560802889907500474146544983","7733801303813526248160289426848155002","328449221763997800467760181019065561074","171889454677858464178211828575625335309","180420887284798950437313727720560900588","296111307738250841379025866185251011725","302264300492902588825628711671847858204","300746572558732625302601277932745638334","320946319132114463535112759167331362879","205298223151676794215434491056808616422","289993707613616582711170844224820509252","26413249731423351078136499886671689705","160201831558384465023785843521504997570","255725900331403741635168924668275238509","72581837716220785971618848568572098849","35315668242731255350762552698598400091","322362946218057680321036918247693849727","272244035529281744367980305555753917550","213945344902666604977809375415103803599","209167455294509237089794457863428978816","105034214953362783408502308416868602234","85913737826192494715055328516857859455","64364746907745766110979586499371220449","188303882651416551832955023848142725998","49856578034049736074515976149517332484","130824167586758441043959508569288646267","66842724665732391190425082872404537653","170253813911264833053462582744276479816","292236652567574037947994252553778083661","120876729164731549809202997316638063779","199394435634674866567242055102985135931","182745005759905572442083273786164856991","24781707224409083331040960408287212522","215283358236241977238920896003512114114","61614050452091119540422645748485453256","306583536893737000029851269848769272318","320150607994940572938272248983290202919","15134180967638900323861718133953687308","296439465565648027090670636487426479888","243469124743432876710305694229026463292","300746572558732625302601277932745638334","320946319132114463535112759167331362879","205298223151676794215434491056808616422","289993707613616582711170844224820509252","26413249731423351078136499886671689705","160201831558384465023785843521504997570","255725900331403741635168924668275238509","72581837716220785971618848568572098849","35315668242731255350762552698598400091","322362946218057680321036918247693849727","272244035529281744367980305555753917550","213945344902666604977809375415103803599","209167455294509237089794457863428978816","105034214953362783408502308416868602234","85913737826192494715055328516857859455","64364746907745766110979586499371220449","261701341931677118492060298693384616600","117890656568826634489406508483546722172","168376136586940594098937790231239496014","238650413656995295252595192573459174793","10750340649640760076361403465158419713","165012024259001614023802185594326443919","121492572671130122784650471332867952605","70490273072808449404062268570703512498","269209795681707323759010004915333506599","207286829737887128814527795832503072661","109637835553497115588404320925232073165","124468545309001644128594094944353125075","299302300648422506657645048957142279467","280144093763899184478457595848531999010","152680059064323343727092993452419090317","206083676834359748109628297345258602678","166667703683971233157485615823154502229","210444788085239497161001174539367366518","90787549932364645469273279741758775015","300746572558732625302601277932745638334","320946319132114463535112759167331362879","25269627289241787621911950337765394219","234937050599370577969708292249572046487","330413026544391919887176214065357229329","188251850176814347514767874960831439561","65838279688830444992923079735754019812","250878361377078107732954500086938751576","131853818338893323714798287105812091603","298806962622650548004846369877018418791","317102643014195284738754880516459938848","248759338387584458723015072947917441648","14287488217986540917784809502541996257","312523487972394540757881928640327280811","201550956021212177097337170644425459233","144883433740768842083807522848713276655","138859558927786835353471320257559087327","23487759313848855935911302672309400875","102043244297400863801477150328521982280","287163650037599372478469647268958949234","297768075006189979248577915518775610358","99622463887883867008085867385275345428","324127030554266084438738243156390887352","109075084179461499180415098764717190865","86421167764985328966239088122101460059","307418838073183411310024636374863059255","310818764764392458535163758673841261334","212840104574296776041054685751549932599","219738587724857660944345609151156113900","312071248794077163008262197777972682404","325166293912599666864549561987208489529","160778735977017232218986016224340348518","22891656523126685584826805503202320033","13906232039482189682070409789838485879","215668190286178593346030138564727223149","122646207475538770042261304263905049518","139620722898740386962990887842784614046","168727790042711549721944247229085790175","210134779933493444123736557387374184984","101715081394689386340354014849807365822","332492219159996433166634495415695110427","108016346379469167819287117233246947614","125607810941762582248483891676375339240","316826136710650014853972413978324473105","275430958428061754343176780872041303912","61828269043226109301554509474616012862","25644675370638697584473903991887263036","309259360367660227962573254798451602948","180049546802950243922820528270634788775","273637792419397168771378512923150504016","192093679031261623440745939823396907749","254084815848064005102609712688000594265","78102652975097323121998935950371673223","329226381178319742283366155930733701732","256589231376202743502277338265420444734","13246191208987843743498873102249772699","265595454929991588064977282964044299720","226795725697873164175353547701968536860","192885718503205617390512316928349408892","296627417928191517384351695197789373369","105579732344820945460523058662775526417","86340119241204720031038070763317896204"],"threshold":0.9},"id":"CVE-2020-36316-8302b886","signature_type":"Line","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80","target":{"file":"src/cp/relic_cp_rsa.c"}},{"deprecated":false,"digest":{"function_hash":"51787330787286231467876970354556657624","length":4151},"id":"CVE-2020-36316-8fd68601","signature_type":"Function","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80","target":{"file":"src/cp/relic_cp_rsa.c","function":"pad_pkcs2"}},{"deprecated":false,"digest":{"function_hash":"321890480262879610976218098852809443603","length":909},"id":"CVE-2020-36316-91dbdac7","signature_type":"Function","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80","target":{"file":"src/cp/relic_cp_rsa.c","function":"pad_basic"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36316.json","vanir_signatures_modified":"2026-07-08T19:44:30Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}