OpenSC Project OpenSC 0.23.0 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:opensc_project:opensc:0.23.0:rc2:*:*:*:*:*:*
part: a version: 0.23.0 update: rc2
| Vendor | Opensc Project (7c9d8a59-ea80-59e6-ad8e-46cc95b14ec2) |
|---|---|
| Product | Opensc (6b09c6af-0af1-54ea-994a-8b9f7880322c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/opensc |
purl2cpe | 2026-06-01 10:16:44.721547 |
pkg:deb/ubuntu/opensc |
purl2cpe | 2026-06-01 10:16:44.721549 |
pkg:github/opensc/opensc |
purl2cpe | 2026-06-01 10:16:44.721550 |
pkg:rpm/fedora/opensc |
purl2cpe | 2026-06-01 10:16:44.721551 |
pkg:sourceforge/opensc |
purl2cpe | 2026-06-01 10:16:44.721553 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4535 |
vulnerable | 2026-06-08 06:16:12.945739 |
Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
MEDIUM (4.5)
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.
Published: 2023-11-06T16:57:45.785Z
Updated: 2025-11-21T06:36:21.112Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.