Opensc Project Opensc 0.23.0 -
Approved changes feed: RSS · Atom
cpe:2.3:a:opensc_project:opensc:0.23.0:-:*:*:*:*:*:*
part: a version: 0.23.0 update: -
| Vendor | Opensc Project (7c9d8a59-ea80-59e6-ad8e-46cc95b14ec2) |
|---|---|
| Product | Opensc (6b09c6af-0af1-54ea-994a-8b9f7880322c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/opensc |
purl2cpe | 2026-06-01 10:16:44.698683 |
pkg:deb/ubuntu/opensc |
purl2cpe | 2026-06-01 10:16:44.698684 |
pkg:github/opensc/opensc |
purl2cpe | 2026-06-01 10:16:44.698686 |
pkg:rpm/fedora/opensc |
purl2cpe | 2026-06-01 10:16:44.698687 |
pkg:sourceforge/opensc |
purl2cpe | 2026-06-01 10:16:44.698688 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4535 |
vulnerable | 2026-06-08 06:16:12.941615 |
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
MEDIUM (4.5)
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.
Published: 2023-11-06T16:57:45.785Z
Updated: 2025-11-21T06:36:21.112Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2977 |
vulnerable | 2026-06-08 06:02:43.731965 |
Details available
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.
Published: 2023-06-01T00:00:00.000Z
Updated: 2025-11-03T21:47:59.585Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.