Use After Free

libopensc.so is vulnerable to Use After Free. The vulnerability is caused when a user or administrator enrolls or modifies cards, due to the authenticemuupdatetokeninfo function in pkcs15-authentic.c only freeing memory if the scgetchallenge function does not return an error, potentially leaving...

OSV-2023-1276 Heap-use-after-free in authentic_emu_update_tokeninfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64898 Crash type: Heap-use-after-free READ 8 Crash state: authenticemuupdatetokeninfo scpkcs15initupdatetokeninfo scpkcs15initupdatelastupdate...