CVE-2026-3336 | Amazon AWS-LC up to 1.68.x PKCS7_verify certificate validation (GHSA-cfwj-9wp5-wqvp)

A vulnerability was found in Amazon AWS-LC up to 1.68.x. It has been classified as critical. This affects the function PKCS7_verify. The manipulation leads to improper certificate validation.

This vulnerability is documented as CVE-2026-3336. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.