Medium severity · published Mar 30, 2026
CVE-2025-66215
OpenSC: Stack-buffer-overflow WRITE in card-oberthur
6.8
CVSS
0.2%
EPSS
No
On KEV
Description
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenSC · OpenSC
< 0.27.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-66215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-66215
Patch
https://github.com/OpenSC/OpenSC/commit/efd1d479832141bcf705c2f47655ada4d5f92f5d
Issue Tracking
https://github.com/OpenSC/OpenSC/pull/3436
Patch
https://github.com/OpenSC/OpenSC/security/advisories/GHSA-q5fc-cw56-hwp2
Vendor Advisory
https://github.com/OpenSC/OpenSC/wiki/CVE-2025-66215
More from OpenSC
7.8
CVE-2026-40528
OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
6.8
CVE-2026-40510
OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
6.8
CVE-2025-66038
OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
6.8
CVE-2025-66037
OpenSC: Out of Bounds vulnerability
6.8
CVE-2025-49010
OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE