Endorsement information is included in transaction data, which is signed by the transaction creator. They are not malleable in any way.
Malleability isn't the problem - if I am a node which is syncing with the network and I'm presented with two different forks of the chain, how do I select between them?