OP
Product
Opensc
55
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 37Low 8
Watch
Add Opensc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8443 | 2.9 | Sep 10 | Libopensc: heap buffer overflow in openpgp driver when generating key Affected: All versions, or not specified |
| CVE-2010-4523 | – | Jan 7 | Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a… Affected: through 0.11.13; 0.3.2; 0.3.5; 0.4.0; 0.5.0; 0.6.0; +32 more |
| CVE-2009-0368 | – | Mar 2 | OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging… Affected: through 0.11.6; 0.3.2; 0.3.5; 0.4.0; 0.5.0; 0.6.0; +25 more |
| CVE-2008-3972 | – | Sep 11 | pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate… Affected: through 0.11.5; 0.4.0; 0.5.0; 0.6.0; 0.6.1; 0.7.0; +15 more |
| CVE-2008-2235 | – | Aug 1 | OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which… Affected: 0.3.2; 0.3.5; 0.4.0; 0.6.0; 0.6.1; 0.7.0; +15 more |