Vulnerabilities

TI-2021-18980 CVE-2021-42778 · GHSA-rh37-88v6-qm47

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

LOW 28

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02141 Published 2022-04-18 Fix deferred CWE-672

TI-2021-18984 CVE-2021-42782 · GHSA-xq25-8g7f-6hc5

LOW 29

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02782 Published 2022-04-18 Fix deferred CWE-119

TI-2021-18983 CVE-2021-42781 · GHSA-93j9-4rqq-x6gr

LOW 29

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02873 Published 2022-04-18 Fix deferred CWE-119

TI-2021-18982 CVE-2021-42780 · GHSA-7wjg-mhwg-m2rc

LOW 28

A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02161 Published 2022-04-18 Fix deferred CWE-252

TI-2021-18981 CVE-2021-42779 · GHSA-rcjw-9639-853h

LOW 28

A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02075 Published 2022-04-18 Fix deferred CWE-416