Login Request a demo
OP
Vendor
Opensc Project
1 product with CVEs on record
55
CVEs
0
On KEV
0
New 30D
Products
OP
Opensc
Opensc Project
7.8
55 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-40528
OP
Opensc
Opensc Project
7.8
0%
May 29OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
CVE-2026-40510
OP
Opensc
Opensc Project
6.8
0%
May 29OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
CVE-2025-66215
OP
Opensc
Opensc Project
6.8
0%
Mar 30OpenSC: Stack-buffer-overflow WRITE in card-oberthur
CVE-2025-66038
OP
Opensc
Opensc Project
6.8
0%
Mar 30OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
CVE-2025-66037
OP
Opensc
Opensc Project
6.8
0%
Mar 30OpenSC: Out of Bounds vulnerability
CVE-2025-49010
OP
Opensc
Opensc Project
6.8
0%
Mar 30OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
CVE-2024-8443
OP
Opensc
Opensc Project
2.9
0%
Sep 10Libopensc: heap buffer overflow in openpgp driver when generating key
CVE-2024-45620
OP
Opensc
Opensc Project
3.9
0%
Sep 3Libopensc: incorrect handling of the length of buffers or files in pkcs15init
CVE-2024-45619
OP
Opensc
Opensc Project
4.3
0%
Sep 3Libopensc: incorrect handling length of buffers or files in libopensc
CVE-2024-45618
OP
Opensc
Opensc Project
3.9
0%
Sep 3Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init
CVE-2024-45617
OP
Opensc
Opensc Project
3.9
0%
Sep 3Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc
CVE-2024-45616
OP
Opensc
Opensc Project
3.9
0%
Sep 3Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc
CVE-2024-45615
OP
Opensc
Opensc Project
3.9
0%
Sep 3Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init
CVE-2024-1454
OP
Opensc
Opensc Project
3.4
0%
Feb 12The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols…
CVE-2023-5992
OP
Opensc
Opensc Project
5.9
1%
Jan 31A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant
CVE-2023-4535
OP
Opensc
Opensc Project
3.8
1%
Nov 6An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption
CVE-2023-40661
OP
Opensc
Opensc Project
6.4
1%
Nov 6Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards
CVE-2023-40660
OP
Opensc
Opensc Project
6.6
1%
Nov 6A flaw was found in OpenSC packages that allow a potential PIN bypass
CVE-2021-34193
OP
Opensc
Opensc Project
7.5
1%
Aug 22Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs
CVE-2023-2977
OP
Opensc
Opensc Project
7.1
0%
Jun 1A vulnerbility was found in OpenSC
CVE-2021-42782
OP
Opensc
Opensc Project
5.3
3%
Apr 18Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library
CVE-2021-42781
OP
Opensc
Opensc Project
5.3
3%
Apr 18Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library
CVE-2021-42780
OP
Opensc
Opensc Project
5.3
2%
Apr 18A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library
CVE-2021-42779
OP
Opensc
Opensc Project
5.3
2%
Apr 18A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid
CVE-2021-42778
OP
Opensc
Opensc Project
5.3
2%
Apr 18A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo
CVE-2020-26572
OP
Opensc
Opensc Project
5.5
0%
Oct 6The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher
CVE-2020-26571
OP
Opensc
Opensc Project
5.5
0%
Oct 6The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init
CVE-2020-26570
OP
Opensc
Opensc Project
5.5
0%
Oct 6The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file
CVE-2019-20792
OP
Opensc
Opensc Project
6.8
1%
Apr 29OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check
CVE-2013-1866
OP
Opensc
Opensc Project
6.1
0%
Jan 30OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability
CVE-2019-19481
OP
Opensc
Opensc Project
4.6
0%
Dec 1An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3
CVE-2019-19480
OP
Opensc
Opensc Project
4.6
1%
Dec 1An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3
CVE-2019-19479
OP
Opensc
Opensc Project
5.5
0%
Dec 1An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3
CVE-2019-16058
OP
Opensc
Opensc Project
7.5
2%
Sep 6An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC
CVE-2019-15946
OP
Opensc
Opensc Project
6.4
0%
Sep 5OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c
CVE-2019-15945
OP
Opensc
Opensc Project
6.4
0%
Sep 5OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c
CVE-2019-6502
OP
Opensc
Opensc Project
7.5
2%
Jan 22sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv
CVE-2018-16427
OP
Opensc
Opensc Project
4.3
0%
Sep 4Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc…
CVE-2018-16426
OP
Opensc
Opensc Project
4.3
1%
Sep 4Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…
CVE-2018-16425
OP
Opensc
Opensc Project
6.6
1%
Sep 4A double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…
CVE-2018-16424
OP
Opensc
Opensc Project
6.6
1%
Sep 4A double free when handling responses in read_file in tools/egk-tool.c (aka the eGK card tool) in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted…
CVE-2018-16423
OP
Opensc
Opensc Project
6.6
1%
Sep 4A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted…
CVE-2018-16422
OP
Opensc
Opensc Project
6.6
1%
Sep 4A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by…
CVE-2018-16421
OP
Opensc
Opensc Project
6.6
1%
Sep 4Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able…
CVE-2018-16420
OP
Opensc
Opensc Project
6.6
1%
Sep 4Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers…
CVE-2018-16419
OP
Opensc
Opensc Project
6.6
1%
Sep 4Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able…
CVE-2018-16418
OP
Opensc
Opensc Project
6.6
1%
Sep 4A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to…
CVE-2018-16393
OP
Opensc
Opensc Project
6.8
1%
Sep 3Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by…
CVE-2018-16392
OP
Opensc
Opensc Project
6.8
1%
Sep 3Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…
CVE-2018-16391
OP
Opensc
Opensc Project
6.8
1%
Sep 3Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to…
CVE-2010-4523
OP
Opensc
Opensc-project
–
1%
Jan 7Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a…
CVE-2009-1603
OP
Opensc
Opensc-project
7.5
1%
May 11src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows…
CVE-2009-0368
OP
Opensc
Opensc-project
–
1%
Mar 2OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging…
CVE-2008-3972
OP
Opensc
Opensc-project
–
0%
Sep 11pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate…
CVE-2008-2235
OP
Opensc
Opensc-project
–
0%
Aug 1OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which…