Skip to content
OpenAdvisories
Low WID-SEC-2026-0917 5 CVEs

OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Mar 30, 2026 · Updated Jun 30, 2026 · Revision 10 · de-DE

Vendor: SUSE Product: Linux Product: openSUSE Platform: Windows

Summary

Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in OpenSC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Zustand herbeizuführen, eine Speicherbeschädigung zu bewirken oder vertrauliche Informationen offenzulegen.

Product

OpenSC stellt Bibliotheken und Werkzeuge zur Programmierung und Nutzung von Chipkarten bereit.

Vulnerabilities 5

  • Medium 5.7
    CVE-2025-13763

    Libopensc: opensc: multiple uses of uninitialized variable

    Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs

    Red Hat OpenSC Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • Low 3.9
    CVE-2025-66037

    OpenSC: Out of Bounds vulnerability

    OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_fr…

    OpenSC OpenSC opensc opensc Debian Ubuntu Azure Linux
  • Low 3.9
    CVE-2025-66038

    OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

    OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In compact-TLV, a single byte encodes the tag (high nibble) and value length (low nibble). With a 1-byte b…

    OpenSC OpenSC opensc opensc Debian Ubuntu Azure Linux
  • Low 3.8
    CVE-2025-49010

    OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

    OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires cra…

    OpenSC OpenSC opensc opensc Debian Ubuntu Azure Linux
  • Low 3.8
    CVE-2025-66215

    OpenSC: Stack-buffer-overflow WRITE in card-oberthur

    OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires cr…

    OpenSC OpenSC opensc opensc Debian Ubuntu Azure Linux

Revision history

  1. #10

    Neue Updates von SUSE aufgenommen

  2. #9

    Neue Updates von SUSE aufgenommen

  3. #8

    Neue Updates von SUSE aufgenommen

  4. #7

    Neue Updates von openSUSE aufgenommen

  5. #6

    Neue Updates von SUSE aufgenommen

  6. #5

    Neue Updates von SUSE aufgenommen

  7. #4

    Referenz(en) aufgenommen: EUVD-2025-209564

  8. #3

    Neue Updates von SUSE aufgenommen

  9. #2

    Neue Updates von openSUSE aufgenommen

  10. #1

    Initiale Fassung

References