Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

50 records

Vendor: OpenSC Component: Opensc Clear all filters
TI-2026-29275 CVE-2026-40528 · GHSA-vxjj-52h8-95w5

OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

Priority LOW 6

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a craf…

CVSS 4.0LOW 1.0 Physical No auth User interaction EPSS 0.00188 Published 2026-05-29 Partial fix · 0.27.0 CWE-121
TI-2026-29260 CVE-2026-40510 · GHSA-7rrw-cv3r-3cgg

OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c

Priority LOW 7

OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption…

CVSS 4.0LOW 1.0 Physical No auth User interaction EPSS 0.00294 Published 2026-05-29 Partial fix · 0.27.0-rc1 CWE-121
TI-2025-40563 CVE-2025-66037

OpenSC: Out of Bounds vulnerability

Priority MEDIUM 63

OpenSC is an open source smart card tools and middleware.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00263 Published 2026-03-30 Partial fix · 0.27.0 CWE-125
TI-2024-01358 CVE-2024-1454 · GHSA-6q4q-mhg5-v6xh

Opensc: memory use after free in authentic driver when updating token info

Priority LOW 19

The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards.

CVSS 3.1LOW 3.4 Physical No auth User interaction EPSS 0.00422 Published 2024-02-12 No fix listed CWE-416
TI-2023-05522 CVE-2023-5992 · GHSA-554m-v42f-hcq9

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

Priority LOW 29

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01156 Published 2024-01-31 Partial fix · 0.20.0-8.el8_9, 0.23.0-4.el9_3 CWE-203
TI-2023-21454 CVE-2023-40661 · GHSA-2c2j-2pgv-gfgc

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

Priority LOW 31

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards.

CVSS 3.1MEDIUM 6.4 Physical Low privileges User interaction EPSS 0.01318 Published 2023-11-06 Partial fix · 0.24.0, 0.20.0-7.el8_9 +1 CWE-119
TI-2023-02789 CVE-2023-2977 · GHSA-p22r-5f28-437x

Memory corruption in OpenSC

Priority LOW 31

A vulnerbility was found in OpenSC.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00293 Published 2023-06-01 Partial fix CWE-119
TI-2021-18984 CVE-2021-42782 · GHSA-xq25-8g7f-6hc5

Memory corruption in opensc

Priority LOW 29

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02782 Published 2022-04-18 Fix deferred CWE-119
TI-2021-18983 CVE-2021-42781 · GHSA-93j9-4rqq-x6gr

Memory corruption in opensc

Priority LOW 29

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02873 Published 2022-04-18 Fix deferred CWE-119
Load more