opensc vulnerabilities
CVEs whose affected-version data names the opensc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2024-8443Low· 2.9A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver
A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to ou…
CVE-2024-45620Low· 3.9A vulnerability was found in the pkcs15-init tool in OpenSC
A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data…
CVE-2024-45619Medium· 4.3A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are…
CVE-2024-45618Low· 3.9A vulnerability was found in pkcs15-init in OpenSC
A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values …
CVE-2024-45617Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient o…
CVE-2024-45616Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following …
CVE-2024-45615Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).