opensc
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-103531 | 0.27.0 ; 0.27.1 | OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-10275 | 0.26.0 ; 0.26.1 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow | LOW 2.3 | 0.3 % | ||
| CVE-2024-8443 | 0.26.0 – < 0.26.0 | Libopensc: heap buffer overflow in openpgp driver when generating key | LOW 2.9 | 0.3 % | ||
| CVE-2024-1454 | 0.25.0 | Opensc: memory use after free in authentic driver when updating token info | LOW 3.4 | 0.4 % | ||
| CVE-2023-40661 | < 0.24.0 | Opensc: multiple memory issues with pkcs15-init (enrollment tool) | MEDIUM 6.4 | 1.3 % | ||
| CVE-2023-40660 | 0.17.0 – < 0.24.0 | Opensc: potential pin bypass when card tracks its own login state | MEDIUM 6.6 | 1.0 % | ||
| CVE-2023-2977 | opensc-0.23.0 | A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The atta | HIGH 7.1 | 0.3 % | ||
| CVE-2021-42778 | opensc 0.22.0 | A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. | MEDIUM 5.3 | 2.1 % | ||
| CVE-2021-42782 | opensc 0.22.0 | Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the li | MEDIUM 5.3 | 2.8 % | ||
| CVE-2021-42781 | opensc 0.22.0 | Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the | MEDIUM 5.3 | 2.9 % | ||
| CVE-2021-42780 | opensc 0.22.0 | A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the li | MEDIUM 5.3 | 2.2 % | ||
| CVE-2021-42779 | opensc 0.22.0 | A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. | MEDIUM 5.3 | 2.1 % |