OP
Product
Opensc
55
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 37Low 8
Watch
Add Opensc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45620 | 3.9 | Sep 3 | Libopensc: incorrect handling of the length of buffers or files in pkcs15init Affected: before 0.26.0 |
| CVE-2024-45618 | 3.9 | Sep 3 | Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init Affected: before 0.26.0 |
| CVE-2024-45617 | 3.9 | Sep 3 | Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc Affected: before 0.26.0 |
| CVE-2024-45616 | 3.9 | Sep 3 | Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc Affected: before 0.26.0 |
| CVE-2024-45615 | 3.9 | Sep 3 | Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init Affected: before 0.26.0 |
| CVE-2023-4535 | 3.8 | Nov 6 | An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption Affected: 0.23.0; 0.23.0; 0.23.0 |
| CVE-2024-1454 | 3.4 | Feb 12 | The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols… Affected: before 0.25.0 |
| CVE-2024-8443 | 2.9 | Sep 10 | Libopensc: heap buffer overflow in openpgp driver when generating key Affected: All versions, or not specified |
Showing 8