Medium severity · published Mar 30, 2026
CVE-2025-49010
OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenSC · OpenSC
< 0.27.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-49010
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-49010
Vendor Advisory
https://github.com/OpenSC/OpenSC/security/advisories/GHSA-q5cf-5wmx-9wh4
Vendor Advisory
https://github.com/OpenSC/OpenSC/wiki/CVE-2025-49010
More from OpenSC
7.8
CVE-2026-40528
OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
6.8
CVE-2026-40510
OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
6.8
CVE-2025-66215
OpenSC: Stack-buffer-overflow WRITE in card-oberthur
6.8
CVE-2025-66038
OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
6.8
CVE-2025-66037
OpenSC: Out of Bounds vulnerability