Read the docs
TI-2018-10609 Aliases CVE-2018-14779GHSA-rvwc-p7mj-cmgq

A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver.

Priority LOW 31CWE-119Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transfer_data()`: {% highlight c %} if(*out_len + recv_len - 2 > max_out) { fprintf(stderr, "Output buffer to small, wanted to write %lu, max was %lu.", *out_len + recv_len - 2, max_out); } if(out_data) { memcpy(out_data, data, recv_len - 2); out_data += recv_len - 2; *out_len += recv_len - 2; } {% endhighlight %} -- it is clearly checked whether the buffer is big enough to hold the data copied using `memcpy()`, but no error handling happens to avoid the `memcpy()` in such cases. This code path can be triggered with malicious data coming from a smartcard.

Why it matters now

EPSS 0.00491 42nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:a:yubico:piv_manager:*:*:*:*:*:*:*:*before 1.4.2VulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2b:*:*:*:*:*:*:*1.4.2bVulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2c:*:*:*:*:*:*:*1.4.2cVulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2d:*:*:*:*:*:*:*1.4.2dVulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2e:*:*:*:*:*:*:*1.4.2eVulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2f:*:*:*:*:*:*:*1.4.2fVulnerableYubico
cpe:2.3:a:yubico:piv_manager:1.4.2g:*:*:*:*:*:*:*1.4.2gVulnerableYubico
cpe:2.3:a:yubico:piv_tool:*:*:*:*:*:*:*:*before 1.6.0VulnerableYubico
cpe:2.3:a:yubico:smart_card_minidriver:*:*:*:*:*:*:*:*up to 3.7.3.160VulnerableYubico
  • cpe:2.3:a:yubico:piv_manager:*:*:*:*:*:*:*:* Versions before 1.4.2 Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2b:*:*:*:*:*:*:* Versions 1.4.2b Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2c:*:*:*:*:*:*:* Versions 1.4.2c Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2d:*:*:*:*:*:*:* Versions 1.4.2d Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2e:*:*:*:*:*:*:* Versions 1.4.2e Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2f:*:*:*:*:*:*:* Versions 1.4.2f Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_manager:1.4.2g:*:*:*:*:*:*:* Versions 1.4.2g Vulnerable ·Yubico
  • cpe:2.3:a:yubico:piv_tool:*:*:*:*:*:*:*:* Versions before 1.6.0 Vulnerable ·Yubico
  • cpe:2.3:a:yubico:smart_card_minidriver:*:*:*:*:*:*:*:* Versions up to 3.7.3.160 Vulnerable ·Yubico

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-14779
  2. 2026-10-03 Alias added: GHSA-rvwc-p7mj-cmgq

References

Advisory 4

  • TI-2018-10610 An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. CVSS 3.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences