Description
OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than 118 bytes in the Key History Object ASN.1 response.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSC | OpenSC | < 0.27.0-rc1 | 0.27.0-rc1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | opensc | 0.22.0-150600.11.14.1 | SUSE-SU-2026:4123-1 |
| SLES 12 SP5 | opensc | 0.13.0-3.39.1 | SUSE-SU-2026:4108-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | opensc | 0.26.1-160000.4.1 | SUSE-SU-2026:23717-1, SUSE-SU-2026:23697-1 |
| SLES 16.0 | opensc | 0.26.1-160000.4.1 | SUSE-SU-2026:23717-1, SUSE-SU-2026:23697-1 |
| SLE Micro 6.2 | opensc | 0.26.1-160000.4.1 | SUSE-SU-2026:23543-1 |
| SLE Micro 6.1 | opensc | 0.24.0-slfo.1.1_5.1 | SUSE-SU-2026:23527-1 |
| SLE Micro 6.0 | opensc | 0.24.0-7.1 | SUSE-SU-2026:23478-1 |
| SLE Micro 5.5 | opensc | 0.22.0-150400.3.20.1 | SUSE-SU-2026:4122-1 |
| SLE Micro 5.4 | opensc | 0.22.0-150400.3.20.1 | SUSE-SU-2026:4122-1 |
| SLE Micro 5.3 | opensc | 0.22.0-150400.3.20.1 | SUSE-SU-2026:4122-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | opensc | 0.26.1-160000.4.1 | openSUSE-SU-2026:21820-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | opensc | 0.27.0-rc1 | — |
Advisories 12
- SUSE-SU-2026:23697-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23717-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 29, 2026
- WID-SEC-2026-1755 OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Sep 24, 2026
- SUSE-SU-2026:23543-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 17, 2026
- SUSE-SU-2026:23527-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 15, 2026
- SUSE-SU-2026:4122-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 14, 2026
- SUSE-SU-2026:4123-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 14, 2026
- SUSE-SU-2026:4108-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 14, 2026
- SUSE-SU-2026:23478-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 14, 2026
- openSUSE-SU-2026:21820-1 Security update for opensc SUSE / openSUSE Security Updates · Sep 12, 2026
- VDE-2026-076 ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products CERT@VDE · Jul 28, 2026
- VDE-2026-081 Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities CERT@VDE · Jul 28, 2026