Lucene search

K
cveMITRECVE-2023-4535
HistoryNov 06, 2023 - 4:57 p.m.

CVE-2023-4535

2023-11-0616:57:45
MITRE
web.nvd.nist.gov
82
cve-2023-4535
opensc
myeid
out-of-bounds read
symmetric key encryption
physical access
usb device
smart card
security vulnerability

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.4%

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system’s security.