Vulnerabilities (CVE)

Filtered by vendor Opensc Project Subscribe
Filtered by product Opensc
Total 44 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16393 1 Opensc Project 1 Opensc 2019-08-06 4.6 MEDIUM 6.8 MEDIUM
Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2018-16391 1 Opensc Project 1 Opensc 2019-08-06 4.6 MEDIUM 6.8 MEDIUM
Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2018-16422 1 Opensc Project 1 Opensc 2019-08-06 4.6 MEDIUM 6.6 MEDIUM
A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2018-16423 1 Opensc Project 1 Opensc 2019-08-06 4.6 MEDIUM 6.6 MEDIUM
A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.