https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:30:09 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2025-66037 <p><strong>Affected:</strong> Alpaquita:23: opensc, Alpaquita:25: opensc, Alpaquita:stream: opensc</p> <p><strong>Affected:</strong> Alpaquita:23: opensc, Alpaquita:25: opensc, Alpaquita:stream: opensc</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-66037 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0414 certfr-2026-avi-0414 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0414 https://cve.radiocsirt.org/vuln/euvd-2026-278203 EUVD-2026-278203 https://cve.radiocsirt.org/vuln/euvd-2026-278203 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66037 <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66037 https://cve.radiocsirt.org/vuln/msrc_cve-2025-66037 msrc_CVE-2025-66037 https://cve.radiocsirt.org/vuln/msrc_cve-2025-66037 https://cve.radiocsirt.org/vuln/oesa-2026-2545 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: opensc</p> <p>OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to smart cards, e.g. PKCS#11 API, Windows’ Smart Card Minidriver and macOS Tokend. Security Fix(es):</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.(CVE-2025-49010)</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.(CVE-2025-66037)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: opensc</p> <p>OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to smart cards, e.g. PKCS#11 API, Windows’ Smart Card Minidriver and macOS Tokend. Security Fix(es):</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.(CVE-2025-49010)</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.(CVE-2025-66037)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2545 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10475-1 <p>opensc-0.27.1-1.1 on GA media</p> <p>opensc-0.27.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10475-1 https://cve.radiocsirt.org/vuln/suse-su-2026:1477-1 <p>Security update for opensc</p> <p>Security update for opensc</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1477-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-66037 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:Pro:20.04:LTS: opensc, Ubuntu:Pro:22.04:LTS: opensc, Ubuntu:Pro:24.04:LTS: opensc, Ubuntu:25.10: opensc, Ubuntu:26.04:LTS: opensc</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:Pro:20.04:LTS: opensc, Ubuntu:Pro:22.04:LTS: opensc, Ubuntu:Pro:24.04:LTS: opensc, Ubuntu:25.10: opensc, Ubuntu:26.04:LTS: opensc</p> <p>OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-66037 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0917 <p>Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Zustand herbeizuführen, eine Speicherbeschädigung zu bewirken oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Zustand herbeizuführen, eine Speicherbeschädigung zu bewirken oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0917