Lucene search
+L

6 matches found

OSV
OSV
•added 2026/05/29 2:16 p.m.•41 views

AZL-89150 CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1

OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longe...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/29 1:26 p.m.•15 views

CVE-2026-40510 OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c

OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longe...

1CVSS6.2AI score
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/29 1:26 p.m.•13 views

CVE-2026-40510

OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longe...

3.8CVSS6.4AI score0.00254EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/29 1:26 p.m.•86 views

CVE-2026-40510

CVE-2026-40510 affects OpenSC before 0.27.0-rc1. A stack buffer overflow in piv_process_history() (src/libopensc/card-piv.c) can memory-corrupt if a physically present attacker uses a crafted PIV card/USB device that returns a URL field longer than 118 bytes in the Key History Object ASN.1 respon...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•1 views

CVE-2026-40510: Stack-based Buffer Overflow

OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longe...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•45 views

PT-2026-44840

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.27.0-rc1 Description A stack buffer overflow exists in the piv process history function within src/libopensc/card-piv.c. This issue allows a physically present attacker to cause memory corruption by using a specially...

6.8CVSS6.3AI score0.00254EPSS
SaveExploits0References21
Rows per page
Query Builder