2.3
Faible
CVE-2026-10275 A flaw has been found in OpenSC up to 0.26.1
Description
A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| opensc 0.26 | 0.26.0 → 0.26.1 | Pas de correctif indiqué |
Autres CVE de opensc
Les 8 CVE de opensc →
CVE-2026-103531
A flaw has been found in OpenSC up to 0.27.1
5.1
Moyenne
CVE-2023-2977
A vulnerbility was found in OpenSC
7.1
Élevée
CVE-2021-42778
A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo
Non notée
CVE-2021-42779
A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid
Non notée