{"id":"CVE-2021-42779","aliases":["AZL-9482","DEBIAN-CVE-2021-42779","DLA-3463-1","DLA-4004-1","EUVD-2021-29735","GHSA-rcjw-9639-853h","MGASA-2021-0512","SUSE-SU-2021:3582-1","SUSE-SU-2022:1041-1","SUSE-SU-2022:1156-1","UBUNTU-CVE-2021-42779","openSUSE-SU-2024:11613-1"],"status":"published","title":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02075,"percentile":0.81725,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2021-10-29T14:26:39Z","modified":"2026-10-23T18:04:16Z","fixes":[{"ecosystem":"Azure Linux:2","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"opensc","fixed_in":["0.22.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-1+deb10u2"}]}],"versions":["0.19.0-1","0.19.0-1+deb10u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:11","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.0-1+deb11u1"}]}],"versions":["0.21.0-1"],"bundled":18},{"source":"osv","ecosystem":"Mageia:8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-3.19.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-150000.3.23.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150100.3.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.15.0-1ubuntu1","0.15.0-1ubuntu1+esm1","0.15.0-1ubuntu1+esm2","0.15.0-1ubuntu1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.0-1","0.17.0-2","0.17.0-2build1","0.17.0-3","0.17.0-3ubuntu0.1~esm1","0.17.0-3ubuntu0.1~esm2","0.17.0-3ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.19.0-2","0.20.0-1","0.20.0-2","0.20.0-3","0.20.0-3ubuntu0.1~esm1","0.20.0-3ubuntu0.1~esm2","0.20.0-3ubuntu0.1~esm3","0.20.0-3ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.0-1.1"}]}],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensc","product":"opensc"},{"vendor":"opensc_project","product":"opensc"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28843","tags":["x_transferred","Issue Tracking","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016086","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/OpenSC/OpenSC/commit/1db88374","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202209-03","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00025.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42779","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rcjw-9639-853h"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-42779","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0512.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29607","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-October/009683.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213582-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191957","tags":["report"]},{"url":"https://bugzilla.suse.com/1191992","tags":["report"]},{"url":"https://bugzilla.suse.com/1192000","tags":["report"]},{"url":"https://bugzilla.suse.com/1192005","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42782","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221041-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1114649","tags":["report"]},{"url":"https://bugzilla.suse.com/1122756","tags":["report"]},{"url":"https://bugzilla.suse.com/1149746","tags":["report"]},{"url":"https://bugzilla.suse.com/1149747","tags":["report"]},{"url":"https://bugzilla.suse.com/1158256","tags":["report"]},{"url":"https://bugzilla.suse.com/1158305","tags":["report"]},{"url":"https://bugzilla.suse.com/1170809","tags":["report"]},{"url":"https://bugzilla.suse.com/1177364","tags":["report"]},{"url":"https://bugzilla.suse.com/1177378","tags":["report"]},{"url":"https://bugzilla.suse.com/1177380","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26572","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221156-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-42779","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42779","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42779","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-42779","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T00:00:00Z","modified":"2025-11-03T21:45:27.939Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:58.739039Z"}],"euvd":[{"id":"EUVD-2021-29735","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T00:00:00Z","modified":"2025-11-03T21:45:27Z","updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-rcjw-9639-853h","title":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-19T00:00:50Z","modified":"2025-11-04T00:31:34Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:28.385807Z"}],"nvd":[{"id":"CVE-2021-42779","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T17:15:16.177Z","modified":"2026-06-17T04:10:07.977Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:06.029737Z"}],"osv":[{"id":"AZL-9482","title":"CVE-2021-42779 affecting package opensc for versions less than 0.22.0-1","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T17:15:16Z","modified":"2026-04-21T04:35:02.786979Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"CVE-2021-42779","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T17:15:16.177Z","modified":"2026-10-20T10:54:05.927376172Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-42779","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T17:15:16.177Z","modified":"2026-10-23T18:04:16.045102795Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"UBUNTU-CVE-2021-42779","description":"A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.","status":"published","published":"2022-04-18T17:15:00Z","modified":"2025-09-08T16:47:23Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DLA-3463-1","title":"opensc - security update","status":"published","published":"2023-06-21T00:00:00Z","modified":"2026-03-09T01:21:14.190295Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4004-1","title":"opensc - security update","status":"published","published":"2024-12-28T00:00:00Z","modified":"2026-03-09T01:19:21.029361Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2021-0512","title":"Updated opensc packages fix security vulnerability","description":"CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\nCVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\nCVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c\n (bsc#1192000).\nCVE-2021-42782: Stack buffer overflow issues in various places\n (bsc#1191957).\n","status":"published","published":"2021-11-18T21:50:59Z","modified":"2026-04-16T04:42:10.422065778Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11613-1","title":"opensc-0.22.0-2.1 on GA media","description":"These are all security issues fixed in the opensc-0.22.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:46.658343Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:3582-1","title":"Security update for opensc","description":"This update for opensc fixes the following issues:\n\n- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\n- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\n- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).\n- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).\n","status":"published","published":"2021-10-29T14:26:39Z","modified":"2026-02-04T02:13:00.291227Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:1041-1","title":"Security update for opensc","description":"This update for opensc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\n- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\n- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).\n- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).\n- CVE-2019-6502: Fixed a memory leak in sc_context_create() (bsc#1122756).\n- CVE-2020-26570: Fixed a heap based buffer overflow in sc_oberthur_read_file (bsc#1177364).\n- CVE-2020-26572: Prevent out of bounds write (bsc#1177378)\n- CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow (bsc#1177380)\n- CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)\n- CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)\n- CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).\n- CVE-2019-19481: Fixed an improper handling of buffer limits for CAC certificates (bsc#1158305).\n- CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809). \n\nNon-security issues fixed:\n\n- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)\n","status":"published","published":"2022-03-30T13:25:11Z","modified":"2026-02-04T03:02:40.711283Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:1156-1","title":"Security update for opensc","description":"This update for opensc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).\n- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).\n- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).\n- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).\n\nNon-security issues fixed: \n\n- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)\n","status":"published","published":"2022-04-12T07:55:14Z","modified":"2026-02-04T03:25:28.546543Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}