cve-eric-pierce-sig