opensc_project has 7 CVEs on record. The median CVSS is 3.9 (low). None have a confirmed exploitation report. The dominant weakness classes are CWE-457 (4) and CWE-908 (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 3.9
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2024-45619Medium· 4.3A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK24CVE-2024-45620Low· 3.9A vulnerability was found in the pkcs15-init tool in OpenSC22CVE-2024-45618Low· 3.9A vulnerability was found in pkcs15-init in OpenSC22CVE-2024-45617Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK22CVE-2024-45616Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK22
opensc_project vulnerabilities
CVEs affecting opensc_project, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2024-8443Low· 2.9A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver
A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to ou…
CVE-2024-45620Low· 3.9A vulnerability was found in the pkcs15-init tool in OpenSC
A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data…
CVE-2024-45619Medium· 4.3A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are…
CVE-2024-45618Low· 3.9A vulnerability was found in pkcs15-init in OpenSC
A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values …
CVE-2024-45617Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient o…
CVE-2024-45616Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following …
CVE-2024-45615Low· 3.9A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK
A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).