Every CVE Search/ Get API key

CVE-2010-4523

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically...

7.2 HighFix available

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Exploit likelihood

0.86%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Record
CVE-2010-4523
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Record
CVE-2010-4523
Updated
2026-11-02
EUVDEUVD-2010-4491 No score

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Record
EUVD-2010-4491
Updated
2026-11-03
GitHub AdvisoriesGHSA-8q7x-x6wm-6x5q No score

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically...

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Record
GHSA-8q7x-x6wm-6x5q
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Record
CVE-2010-4523
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4523 No score

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.

Record
DEBIAN-CVE-2010-4523
Updated
2026-11-02
OSVopenSUSE-SU-2024:10269-1 No score

opensc-0.16.0-2.1 on GA media

These are all security issues fixed in the opensc-0.16.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10269-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
opensc
Debian:12
 before 0.11.13-1.1
0.11.13-1.1
opensc
Debian:13
 before 0.11.13-1.1
0.11.13-1.1
opensc
Debian:14
 before 0.11.13-1.1
0.11.13-1.1
opensc
openSUSE:Tumbleweed
 before 0.16.0-2.1
0.16.0-2.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4523 is a high vulnerability (CVSS 7.2) in Opensc-project Opensc, published January 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.86%, the 58th percentile. Fixed in opensc 0.11.13-1.1.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open