Every CVE Search/ Get API key

CVE-2026-103531

OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow

5.1 MediumFix available

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
Passive

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.19%Unchanged since Oct 2, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.1

OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
CVE-2026-103531
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
CVSS 3.0
5.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
CVSS 2.0
6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C
Weakness
CWE-121, CWE-119
Updated
2026-11-02
EUVDEUVD-2026-90449 5.1

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
EUVD-2026-90449
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Updated
2026-11-02
GitHub AdvisoriesGHSA-m2qg-x6vj-xmrg 5.1

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function...

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
GHSA-m2qg-x6vj-xmrg
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD 5.1

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
CVE-2026-103531
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-119, CWE-121
Updated
2026-11-02
OSV 5.1

OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
CVE-2026-103531
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Weakness
CWE-119, CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2026-103531 5.1

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
DEBIAN-CVE-2026-103531
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVUBUNTU-CVE-2026-103531 5.1

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
UBUNTU-CVE-2026-103531
CVSS 4.0
5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVAZL-105342 No score

CVE-2026-103531 affecting package opensc for versions less than 0.27.1-3

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.

Record
AZL-105342
Updated
2026-11-07
OSVCLSA-2026-1791470029 No score

opensc: Fix of CVE-2026-103531

  • CVE-2026-103531: stack buffer overflow in setcos_construct_fci_44() when type, security or proprietary file attributes exceed 64 bytes
Record
CLSA-2026-1791470029
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
opensc
Azure Linux:3
 before 0.27.1-3
0.27.1-3
opensc
TuxCare:AlmaLinux:9.6
 before 0.23.0-5.el9.tuxcare.els7
0.23.0-5.el9.tuxcare.els7
opensc
Debian:12
 All versions, plus listed versions
0.23.0-0.30.23.0-0.3+deb12u10.23.0-0.3+deb12u20.23.0-10.23.0-2
Show 14 moreShow less
0.24.0~rc1-10.25.0~rc1-10.25.1-10.25.1-20.25.1-2.10.26.0-10.26.1-10.26.1-20.26.1-30.27.0~rc1-10.27.0~rc2-10.27.1-10.27.1-20.27.1-3
 None known
opensc
Debian:13
 All versions, plus listed versions
0.26.1-20.26.1-30.27.0~rc1-10.27.0~rc2-10.27.1-10.27.1-20.27.1-3
 None known
opensc
Debian:14
 before 0.27.1-3, plus listed versions
0.26.1-20.26.1-30.27.0~rc1-10.27.0~rc2-10.27.1-10.27.1-2
0.27.1-3
opensc
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.15.0-1ubuntu10.15.0-1ubuntu1+esm10.15.0-1ubuntu1+esm20.15.0-1ubuntu1+esm3
 None known
opensc
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.17.0-10.17.0-20.17.0-2build10.17.0-30.17.0-3ubuntu0.1~esm10.17.0-3ubuntu0.1~esm20.17.0-3ubuntu0.1~esm3
 None known
opensc
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
0.19.0-20.20.0-10.20.0-20.20.0-30.20.0-3ubuntu0.1~esm10.20.0-3ubuntu0.1~esm20.20.0-3ubuntu0.1~esm30.20.0-3ubuntu0.1~esm4
 None known
opensc
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
0.21.0-1ubuntu10.22.0-1ubuntu20.22.0-1ubuntu2+esm10.22.0-1ubuntu2.10.22.0-1ubuntu2.1+esm1
 None known
opensc
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
0.23.0-1ubuntu40.24.0~rc1-10.25.0~rc1-10.25.0~rc1-1build10.25.0~rc1-1build2
Show 4 moreShow less
0.25.0~rc1-1ubuntu0.1~esm10.25.0~rc1-1ubuntu0.10.25.0~rc1-1ubuntu0.20.25.0~rc1-1ubuntu0.2+esm1
 None known
opensc
Ubuntu:26.10
 All versions, plus listed versions
0.27.0~rc1-10.27.1-20.27.1-2ubuntu10.27.1-2ubuntu2
 None known
opensc
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.26.1-30.26.1-3ubuntu10.27.0~rc1-1
 None known

History

History
RecordedChangedSources
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-103531 is a medium vulnerability (CVSS 5.1) in Opensc, published October 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. Fixed in opensc 0.27.1-3.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open