Medium severity · published Jun 1, 2026
CVE-2026-10275
OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow
5.0
CVSS
0.3%
EPSS
No
On KEV
Description
A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenSC · Opensc
0.26.0; 0.26.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10275
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10275
github.com
https://github.com/OpenSC/OpenSC/
github.com
https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab
github.com
https://github.com/OpenSC/OpenSC/issues/3682
github.com
https://github.com/OpenSC/OpenSC/pull/3684
pan.baidu.com
https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg
vuldb.com
https://vuldb.com/cve/CVE-2026-10275
More from OpenSC
7.8
CVE-2026-40528
OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
6.8
CVE-2026-40510
OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
6.8
CVE-2025-66215
OpenSC: Stack-buffer-overflow WRITE in card-oberthur
6.8
CVE-2025-66038
OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
6.8
CVE-2025-66037
OpenSC: Out of Bounds vulnerability