CVE-2024-8443Low· 2.9▾ SunlitA heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to ou…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 16 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code execution.
openscenterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux = 9.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-45620Low· 3.9A vulnerability was found in the pkcs15-init tool in OpenSC
CVE-2024-45619Medium· 4.3A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
CVE-2024-45618Low· 3.9A vulnerability was found in pkcs15-init in OpenSC
CVE-2024-45617Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
CVE-2024-45616Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
CVE-2024-45615Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK