https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:04:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336783 EUVD-2026-336783 https://cve.radiocsirt.org/vuln/euvd-2026-336783 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40528 <p>OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning with &#39;=&#39; followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length check, causing both stack and heap buffer overruns.</p> <p>OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning with &#39;=&#39; followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length check, causing both stack and heap buffer overruns.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40528 https://cve.radiocsirt.org/vuln/ghsa-vxjj-52h8-95w5 <p>OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning with &#39;=&#39; followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length check, causing both stack and heap buffer overruns.</p> <p>OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning with &#39;=&#39; followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length check, causing both stack and heap buffer overruns.</p> https://cve.radiocsirt.org/vuln/ghsa-vxjj-52h8-95w5 https://cve.radiocsirt.org/vuln/msrc_cve-2026-40528 msrc_CVE-2026-40528 https://cve.radiocsirt.org/vuln/msrc_cve-2026-40528 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11022-1 <p>opensc-0.27.1-2.1 on GA media</p> <p>opensc-0.27.1-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11022-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22103-1 <p>Security update for opensc</p> <p>Security update for opensc</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22103-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1755 <p>Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1755