Opensc Project Opensc vulnerabilities

• opensc OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c CVE-2026-40528 Fix available 1.0 LowMay 29, 2026
• opensc OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c CVE-2026-40510 Fix available 1.0 LowMay 29, 2026
• opensc OpenSC: Stack-buffer-overflow WRITE in card-oberthur CVE-2025-66215 Fix available 3.8 LowMarch 30, 2026
• opensc OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers CVE-2025-66038 Fix available 3.9 LowMarch 30, 2026
• opensc OpenSC: Out of Bounds vulnerability CVE-2025-66037 Fix available 3.9 LowMarch 30, 2026
• opensc OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE CVE-2025-49010 Fix available 3.8 LowMarch 30, 2026
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: heap buffer overflow in openpgp driver when generating key CVE-2024-8443 Fix available 2.9 LowSeptember 7, 2024
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc CVE-2024-45617 Fix available 3.9 LowSeptember 3, 2024
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: incorrect handling of the length of buffers or files in pkcs15init CVE-2024-45620 Fix available 3.9 LowSeptember 3, 2024
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: incorrect handling length of buffers or files in libopensc CVE-2024-45619 Fix available 4.3 MediumSeptember 3, 2024
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init CVE-2024-45618 Fix available 3.9 LowSeptember 3, 2024
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc CVE-2024-45616 Fix available 3.9 LowSeptember 3, 2024
• opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init CVE-2024-45615 Fix available 3.9 LowSeptember 3, 2024
• opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 more Opensc: memory use after free in authentic driver when updating token info CVE-2024-1454 Fix available 3.4 LowFebruary 12, 2024
• opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +11 more +13 more Opensc: side-channel leaks while stripping encryption pkcs#1 padding CVE-2023-5992 Fix available 5.6 MediumJanuary 31, 2024
• opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 more Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys CVE-2023-4535 Fix available 4.5 MediumNovember 6, 2023
• opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 more Opensc: potential pin bypass when card tracks its own login state CVE-2023-40660 Fix available 6.6 MediumOctober 16, 2023
• opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 more Opensc: multiple memory issues with pkcs15-init (enrollment tool) CVE-2023-40661 Fix available 5.4 MediumOctober 12, 2023
• opensc project opensc Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to... CVE-2021-34193 Fix available 7.5 HighAugust 22, 2023
• opensc, redhat enterprise linux +1 more A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in... CVE-2023-2977 Fix available 7.1 HighJune 1, 2023
• opensc, fedoraproject fedora, redhat enterprise linux +2 more A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. CVE-2021-42778 Fix available 5.3 MediumApril 18, 2022
• opensc, fedoraproject fedora +1 more Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that... CVE-2021-42782 Fix available 5.3 MediumOctober 29, 2021
• opensc, fedoraproject fedora, redhat enterprise linux +2 more Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that... CVE-2021-42781 Fix available 5.3 MediumOctober 29, 2021
• opensc, fedoraproject fedora, redhat enterprise linux +2 more A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that... CVE-2021-42780 Fix available 5.3 MediumOctober 29, 2021
• opensc, fedoraproject fedora, redhat enterprise linux +2 more A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. CVE-2021-42779 Fix available 5.3 MediumOctober 29, 2021
• opensc project opensc, debian linux, fedoraproject fedora +2 more The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer... CVE-2020-26570 Fix available 5.5 MediumOctober 6, 2020
• opensc project opensc, debian linux, fedoraproject fedora +2 more The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer... CVE-2020-26571 Fix available 5.5 MediumOctober 6, 2020
• opensc project opensc, debian linux, fedoraproject fedora +2 more The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow... CVE-2020-26572 Fix available 5.5 MediumOctober 6, 2020
• opensc project opensc OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in... CVE-2019-20792 Fix available 6.8 MediumApril 29, 2020
• opensc opensc.tokend, opensc project opensc +1 more OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability CVE-2013-1866 6.1 MediumJanuary 30, 2020
• opensc project opensc, debian linux, fedoraproject fedora +2 more An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card... CVE-2019-19479 Fix available 5.5 MediumDecember 1, 2019
• opensc project opensc An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card... CVE-2019-19481 Fix available 4.6 MediumDecember 1, 2019
• opensc project opensc An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15... CVE-2019-19480 Fix available 4.6 MediumDecember 1, 2019
• opensc project opensc An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card... CVE-2019-16058 Fix available 7.5 HighSeptember 6, 2019
• opensc project opensc, debian linux, fedoraproject fedora +2 more OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in... CVE-2019-15946 Fix available 6.4 MediumSeptember 5, 2019
• opensc project opensc, debian linux, fedoraproject fedora +2 more OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string... CVE-2019-15945 Fix available 6.4 MediumSeptember 5, 2019
• opensc project opensc sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a... CVE-2019-6502 Fix available 7.5 HighJanuary 22, 2019
• opensc project opensc Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by... CVE-2018-16427 Fix available 4.3 MediumSeptember 4, 2018
• opensc project opensc Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc... CVE-2018-16426 Fix available 4.3 MediumSeptember 4, 2018
• opensc project opensc A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc... CVE-2018-16425 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in... CVE-2018-16424 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c... CVE-2018-16423 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc A single byte buffer overflow when handling responses from an esteid Card in... CVE-2018-16422 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID... CVE-2018-16421 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in... CVE-2018-16420 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in... CVE-2018-16419 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC... CVE-2018-16418 Fix available 6.6 MediumSeptember 4, 2018
• opensc project opensc Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in... CVE-2018-16393 Fix available 6.8 MediumSeptember 3, 2018
• opensc project opensc Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in... CVE-2018-16392 Fix available 6.8 MediumSeptember 3, 2018
• opensc project opensc Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in... CVE-2018-16391 Fix available 6.8 MediumSeptember 3, 2018