Opensc vulnerabilities

Products

• Opensc 15
• Pam Pkcs11 2

Newest

• opensc OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow CVE-2026-103531 Fix available 5.1 MediumOctober 1, 2026
• opensc OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow CVE-2026-10275 Fix available 2.3 LowJune 1, 2026
• opensc OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c CVE-2026-40528 Fix available 1.0 LowMay 29, 2026
• opensc OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c CVE-2026-40510 Fix available 1.0 LowMay 29, 2026
• opensc, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more Libopensc: opensc: multiple uses of uninitialized variable CVE-2025-13763 Fix available 5.7 MediumApril 1, 2026
• opensc OpenSC: Stack-buffer-overflow WRITE in card-oberthur CVE-2025-66215 Fix available 3.8 LowMarch 30, 2026
• opensc OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers CVE-2025-66038 Fix available 3.9 LowMarch 30, 2026
• opensc OpenSC: Out of Bounds vulnerability CVE-2025-66037 Fix available 3.9 LowMarch 30, 2026
• opensc OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE CVE-2025-49010 Fix available 3.8 LowMarch 30, 2026
• opensc pam pkcs11 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN CVE-2025-24031 Fix available 5.1 MediumFebruary 10, 2025
• opensc pam pkcs11 PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`) CVE-2025-24032 Fix available 9.2 CriticalFebruary 6, 2025
• opensc, redhat enterprise linux +1 more A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in... CVE-2023-2977 Fix available 7.1 HighJune 1, 2023
• opensc, fedoraproject fedora, redhat enterprise linux +2 more A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. CVE-2021-42778 Fix available 5.3 MediumApril 18, 2022
• opensc, fedoraproject fedora +1 more Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that... CVE-2021-42782 Fix available 5.3 MediumOctober 29, 2021
• opensc, fedoraproject fedora, redhat enterprise linux +2 more Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that... CVE-2021-42781 Fix available 5.3 MediumOctober 29, 2021
• opensc, fedoraproject fedora, redhat enterprise linux +2 more A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that... CVE-2021-42780 Fix available 5.3 MediumOctober 29, 2021
• opensc, fedoraproject fedora, redhat enterprise linux +2 more A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. CVE-2021-42779 Fix available 5.3 MediumOctober 29, 2021
• opensc opensc.tokend, opensc project opensc +1 more OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability CVE-2013-1866 6.1 MediumJanuary 30, 2020