https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:16:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-03243 bdu:2024-03243 https://cve.radiocsirt.org/vuln/bdu:2024-03243 https://cve.radiocsirt.org/vuln/bell-cve-2024-1454 <p><strong>Affected:</strong> Alpaquita:23: opensc, Alpaquita:stream: opensc</p> <p><strong>Affected:</strong> Alpaquita:23: opensc, Alpaquita:stream: opensc</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-1454 https://cve.radiocsirt.org/vuln/euvd-2026-260303 EUVD-2026-260303 https://cve.radiocsirt.org/vuln/euvd-2026-260303 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1454 <p>The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.</p> <p>The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1454 https://cve.radiocsirt.org/vuln/ghsa-6q4q-mhg5-v6xh <p>The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.</p> <p>The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.</p> https://cve.radiocsirt.org/vuln/ghsa-6q4q-mhg5-v6xh https://cve.radiocsirt.org/vuln/gsd-2024-1454 gsd-2024-1454 https://cve.radiocsirt.org/vuln/gsd-2024-1454 https://cve.radiocsirt.org/vuln/msrc_cve-2024-1454 msrc_CVE-2024-1454 https://cve.radiocsirt.org/vuln/msrc_cve-2024-1454 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13733-1 <p>opensc-0.24.0-2.1 on GA media</p> <p>opensc-0.24.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13733-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1454 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:20.04:LTS: opensc, Ubuntu:22.04:LTS: opensc, Ubuntu:24.04:LTS: opensc</p> <p>The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:20.04:LTS: opensc, Ubuntu:22.04:LTS: opensc, Ubuntu:24.04:LTS: opensc</p> <p>The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or smart card to present the system with specially crafted responses to the APDUs, which are considered high complexity and low severity. This manipulation can allow for compromised card management operations during enrolment.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1454 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0354 <p>Ein lokaler Angreifer kann eine Schwachstelle in OpenSC ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in OpenSC ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0354