Approved changes feed: RSS · Atom

cpe:2.3:a:opensc_project:opensc:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpensc Project (7c9d8a59-ea80-59e6-ad8e-46cc95b14ec2)
ProductOpensc (6b09c6af-0af1-54ea-994a-8b9f7880322c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/opensc purl2cpe 2026-06-01 10:16:44.698391
pkg:deb/ubuntu/opensc purl2cpe 2026-06-01 10:16:44.698393
pkg:github/opensc/opensc purl2cpe 2026-06-01 10:16:44.698394
pkg:rpm/fedora/opensc purl2cpe 2026-06-01 10:16:44.698396
pkg:sourceforge/opensc purl2cpe 2026-06-01 10:16:44.698397

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8443 vulnerable 2026-06-08 07:00:24.656372 Libopensc: heap buffer overflow in openpgp driver when generating key
LOW (2.9)
A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-of-bound rights, possibly resulting in arbitrary code execution.
Published: 2024-09-10T13:16:51.146Z
Updated: 2026-06-30T06:48:25.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.