OpenSC vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20252
3. 20267

Newest CVEs

• CVE-2026-40528

  OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

  OpenSC · OpenSC

  Low1.0
• CVE-2026-40510

  OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c

  OpenSC · OpenSC

  Low1.0
• CVE-2025-13763

  Libopensc: opensc: multiple uses of uninitialized variable

  OpenSC · OpenSC

  Medium5.7
• CVE-2025-66215

  OpenSC: Stack-buffer-overflow WRITE in card-oberthur

  OpenSC · OpenSC

  Low3.8
• CVE-2025-66038

  OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

  OpenSC · OpenSC

  Low3.9
• CVE-2025-66037

  OpenSC: Out of Bounds vulnerability

  OpenSC · OpenSC

  Low3.9
• CVE-2025-49010

  OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

  OpenSC · OpenSC

  Low3.8
• CVE-2025-24032

  PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)

  OpenSC · pam_pkcs11

  Critical9.2
• CVE-2025-24031

  PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

  OpenSC · pam_pkcs11

  Medium5.1
• CVE-2013-1866

  OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability

  OpenSC · OpenSC.tokend

  Medium6.1