Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Aut…

A vulnerability in AWS-LC's PKCS7_verify() function allows unauthenticated users to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. This improper signature validation could allow attackers to circumvent cryptographic security controls. AWS customers using AWS services are not affected, but applications directly using AWS-LC need to upgrade to version 1.69.0. The vulnerability specifically impacts the signature verification process in cryptographic operations.