Medium severity · published Oct 1, 2026
CVE-2026-103531
OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument type_attr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called ad730304052937c32b4eb489a06835ac6123632c. It is best practice to apply a patch to resolve this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenSC · Opensc
0.27.0; 0.27.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-103531
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-103531
vdb-entry
https://vuldb.com/vuln/412343
signature
https://vuldb.com/vuln/412343/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-103531
third-party-advisory
https://vuldb.com/submit/956910
issue-tracking
https://github.com/OpenSC/OpenSC/pull/3812
patch
https://github.com/OpenSC/OpenSC/commit/ad730304052937c32b4eb489a06835ac6123632c
More from OpenSC
7.8
CVE-2026-40528
OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
6.8
CVE-2026-40510
OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
6.8
CVE-2025-66215
OpenSC: Stack-buffer-overflow WRITE in card-oberthur
6.8
CVE-2025-66038
OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
6.8
CVE-2025-66037
OpenSC: Out of Bounds vulnerability