DeutschShown in its original language — a full translation is planned for a future version.
OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2026-05-31
Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-40528US | high7.8 | — | ||
OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attacke… | ||||
| CVE-2026-40510US | medium6.8 | — | ||
OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically presen… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS2-2026-3824 vom 2026-07-21external
- EU Vulnerability Database vom 2026-05-31external
- EU Vulnerability Database vom 2026-05-31external
- openSUSE Security Update OPENSUSE-SU-2026:11022-1 vom 2026-06-15external
- openSUSE Security Update OPENSUSE-SU-2026:21873-1 vom 2026-09-24external
- SUSE Security Update SUSE-SU-2026:22103-1 vom 2026-06-16external
- SUSE Security Update SUSE-SU-2026:22139-1 vom 2026-06-17external
- SUSE Security Update SUSE-SU-2026:2657-1 vom 2026-06-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan