DeutschShown in its original language — a full translation is planned for a future version.
OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2026-03-30
Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Zustand herbeizuführen, eine Speicherbeschädigung zu bewirken oder vertrauliche Informationen offenzulegen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-13763US | — | — | ||
Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card… | ||||
| CVE-2025-66215US | medium6.8 | — | ||
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token c… | ||||
| CVE-2025-66038US | medium6.8 | — | ||
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In compact-TLV, a single by… | ||||
| CVE-2025-66037US | medium6.8 | — | ||
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-boun… | ||||
| CVE-2025-49010US | medium6.8 | — | ||
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token c… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Bugzilla vom 2026-03-30external
- Red Hat Bugzilla vom 2026-03-30external
- Red Hat Bugzilla vom 2026-03-30external
- Red Hat Bugzilla vom 2026-03-30external
- GitHub Security Advisory GHSA-2v44-fq35-98vv vom 2026-03-30external
- GitHub Security Advisory GHSA-72x5-fwjx-2459 vom 2026-03-30external
- GitHub Security Advisory GHSA-m58q-rmjm-mmfx vom 2026-03-30external
- GitHub Security Advisory GHSA-q5cf-5wmx-9wh4 vom 2026-03-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan