{"id":"UBUNTU-CVE-2026-59112","details":"Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.","modified":"2026-08-13T03:00:55.075570028Z","published":"2026-08-10T14:17:00Z","upstream":["CVE-2026-59112"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-59112"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-59112"},{"type":"REPORT","url":"https://github.com/open-eid/libdigidocpp/pull/690"},{"type":"REPORT","url":"https://www.id.ee/en/article/ria-soovitab-kasutajatel-uuendada-id-tarkvara-eng/"},{"type":"REPORT","url":"https://www.ria.ee/blogi/digidoc-rakendustes-esinenud-turvanorkus-mis-juhtus-ja-kuidas-see-parandati"}],"affected":[{"package":{"name":"libdigidoc","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/libdigidoc?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.0-0ubuntu4","3.10.1.1208+ds1-1","3.10.1.1208+ds1-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libdigidoc-common","binary_version":"3.10.1.1208+ds1-2"},{"binary_version":"3.10.1.1208+ds1-2","binary_name":"libdigidoc-tools"},{"binary_name":"libdigidoc2","binary_version":"3.10.1.1208+ds1-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-59112.json"}},{"package":{"name":"libdigidoc","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/libdigidoc?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.1.1208+ds1-2.1"],"ecosystem_specific":{"binaries":[{"binary_name":"libdigidoc-common","binary_version":"3.10.1.1208+ds1-2.1"},{"binary_name":"libdigidoc-tools","binary_version":"3.10.1.1208+ds1-2.1"},{"binary_name":"libdigidoc2","binary_version":"3.10.1.1208+ds1-2.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-59112.json"}},{"package":{"name":"libdigidoc","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/libdigidoc?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.4+ds1-2"],"ecosystem_specific":{"binaries":[{"binary_version":"3.10.4+ds1-2","binary_name":"libdigidoc-common"},{"binary_version":"3.10.4+ds1-2","binary_name":"libdigidoc-tools"},{"binary_name":"libdigidoc2","binary_version":"3.10.4+ds1-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-59112.json"}},{"package":{"name":"libdigidoc","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/libdigidoc?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.5-4","3.10.5-4.1build1","3.10.5-4.1ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_version":"3.10.5-4.1ubuntu2","binary_name":"libdigidoc-common"},{"binary_name":"libdigidoc-tools","binary_version":"3.10.5-4.1ubuntu2"},{"binary_version":"3.10.5-4.1ubuntu2","binary_name":"libdigidoc2t64"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-59112.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"type":"Ubuntu","score":"medium"}]}