Read the docs

OpenSC

Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

OpenSC records in CISA KEV

No OpenSC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opensc 50 records MEDIUM

Records

53 records

TI-2025-40563 CVE-2025-66037

OpenSC: Out of Bounds vulnerability

Priority MEDIUM 63

OpenSC is an open source smart card tools and middleware.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00263 Published 2026-03-30 Partial fix · 0.27.0 CWE-125
TI-2025-12579 CVE-2025-13763

Libopensc: opensc: multiple uses of uninitialized variable

Priority MEDIUM 59

Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash.

CVSS 3.1MEDIUM 5.7 Physical No auth No interaction EPSS 0.00265 Published 2026-04-23 Partial fix · 0.27.0 CWE-457
TI-2023-21454 CVE-2023-40661 · GHSA-2c2j-2pgv-gfgc

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

Priority LOW 31

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards.

CVSS 3.1MEDIUM 6.4 Physical Low privileges User interaction EPSS 0.01318 Published 2023-11-06 Partial fix · 0.24.0, 0.20.0-7.el8_9 +1 CWE-119
TI-2023-02789 CVE-2023-2977 · GHSA-p22r-5f28-437x

Memory corruption in OpenSC

Priority LOW 31

A vulnerbility was found in OpenSC.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00293 Published 2023-06-01 Partial fix CWE-119
TI-2018-11750 CVE-2018-16393 · GHSA-5v2c-mrj8-6f2m

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in…

Priority LOW 31

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcard…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.0062 Published 2018-09-03 Fixed CWE-119
TI-2018-11774 CVE-2018-16425 · GHSA-634q-77fv-9cq7

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in…

Priority LOW 30

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial o…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00635 Published 2018-09-04 No fix listed CWE-415
TI-2018-11773 CVE-2018-16424 · GHSA-29r7-6cj9-gh39

A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card…

Priority LOW 30

A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (applic…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00635 Published 2018-09-04 No fix listed CWE-415
TI-2018-11772 CVE-2018-16423 · GHSA-x56f-5g95-vmfx

A double free when handling responses from a smartcard in sc_file_set_sec_attr in…

Priority LOW 30

A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (appl…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00635 Published 2018-09-04 Fixed CWE-415
TI-2018-11771 CVE-2018-16422 · GHSA-f432-537h-hwj6

A single byte buffer overflow when handling responses from an esteid Card in…

Priority LOW 30

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00666 Published 2018-09-04 Fixed CWE-119
TI-2018-11770 CVE-2018-16421 · GHSA-h7qm-v38r-6f4c

Several buffer overflows when handling responses from a CAC Card in…

Priority LOW 30

Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00692 Published 2018-09-04 Fixed CWE-119
TI-2018-11769 CVE-2018-16420 · GHSA-w4mm-38jx-q774

Several buffer overflows when handling responses from an ePass 2003 Card in…

Priority LOW 30

Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00666 Published 2018-09-04 Fixed CWE-119
TI-2018-11768 CVE-2018-16419 · GHSA-955c-643p-2354

Several buffer overflows when handling responses from a Cryptoflex card in…

Priority LOW 30

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a de…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00666 Published 2018-09-04 Fixed CWE-119
TI-2018-11767 CVE-2018-16418 · GHSA-4qgx-xw7p-6ggp

A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c…

Priority LOW 30

A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application c…

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00666 Published 2018-09-04 Fixed CWE-119
Load more
Open these records in search →