Browse CVEs

HIGH 7.8 CVE-2026-40528 OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15ini… Opensc 0.27.0+ Fix from $1,9502026-05-29 MEDIUM 6.8 CVE-2026-40510 OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.… Opensc 0.27.0+ Fix from $1,6002026-05-29 MEDIUM 6.8 CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes O… Opensc 0.27.0+ Fix from $1,6002026-03-30 MEDIUM 6.8 CVE-2025-66038 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given t… Opensc 0.27.0+ Fix from $1,6002026-03-30 MEDIUM 6.8 CVE-2025-66215 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user … Opensc 0.27.0+ Fix from $1,6002026-03-30 MEDIUM 6.8 CVE-2025-49010 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user … Opensc 0.27.0+ Fix from $1,6002026-03-30 HIGH 7.5 CVE-2021-34193 Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. Opensc 0.22.0+ Fix from $1,9502023-08-22 MEDIUM 6.8 CVE-2019-20792 OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check. Opensc 0.20.0+ Fix from $1,6002020-04-29 MEDIUM 6.1 CVE-2013-1866 OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability Opensc 0.13.0+ Fix from $1,6002020-01-30 HIGH 7.5 CVE-2019-16058 An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes,… Opensc Patch available Fix from $1,9502019-09-06 HIGH 7.5 CVE-2019-6502 sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv. Opensc No fix yet Fix from $1,9502019-01-22 MEDIUM 6.6 CVE-2018-16424 A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16425 A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be … Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16418 A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able t… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16419 Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 cou… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16420 Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16421 Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 c… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16422 A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.6 CVE-2018-16423 A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attacke… Opensc after 0.18.0 Fix from $1,6002018-09-04 MEDIUM 6.8 CVE-2018-16391 Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could… Opensc after 0.18.0 Fix from $1,6002018-09-03 MEDIUM 6.8 CVE-2018-16392 Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be u… Opensc after 0.18.0 Fix from $1,6002018-09-03 MEDIUM 6.8 CVE-2018-16393 Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before… Opensc after 0.18.0 Fix from $1,6002018-09-03