A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

...