A vulnerability was found in Amazon AWS-LC up to 1.68.x and classified as problematic. The impacted element is the function PKCS7_verify. Executing a manipulation can lead to improper verification of cryptographic signature.

This vulnerability is registered as CVE-2026-3338. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.