OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs

An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC

sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows…

A vulnerbility was found in OpenSC

OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

OpenSC: Out of Bounds vulnerability

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by…

Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…

Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…

A flaw was found in OpenSC packages that allow a potential PIN bypass

A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…

A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted…

A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted…

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by…

Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able…

Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers…

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able…

A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to…

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher

The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init

The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library

A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library

A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3

Libopensc: incorrect handling length of buffers or files in libopensc

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc…

Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…

Libopensc: incorrect handling of the length of buffers or files in pkcs15init

Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc

Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption

The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols…