PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted.CreditsNicholas Carlini from AnthropicReferenceshttps://github.com/wolfSSL/wolfssl/pull/10203https://www.wolfssl.com/docs/security-vulnerabilities/
