An adversary exploits a cryptographic weakness in the signature verification algorithm implementation to generate a valid signature without knowing the key.