CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1

CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1. A patched version of the package is available...

Fedora 44 : opensc (2026-8c5856afbb)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8c5856afbb advisory. New upstream release 2442363 fixing various security issues. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2025-13763 Libopensc: opensc: multiple uses of uninitialized variable

Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs...

SUSE-SU-2026:21283-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses bsc1261214. - CVE-2025-66037: crafted input can cause an out-of-bounds read bsc1261218. - CVE-2025-66038: improper compact-TLV length validation can lead to...

Security update for opensc

This update for opensc fixes the following issues: CVE-2025-49010: specially crafted smart card or USB device can lead to a stack buffer overflow write in GET RESPONSE bsc1261214. CVE-2025-66037: specially crafted input processed by the fuzzpkcs15reader harness can lead to an out-of-bounds heap...

SUSE-SU-2026:1477-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2025-49010: specially crafted smart card or USB device can lead to a stack buffer overflow write in GET RESPONSE bsc1261214. - CVE-2025-66037: specially crafted input processed by the fuzzpkcs15reader harness can lead to an out-of-bounds he...

Fedora 42 : opensc (2026-de85b06438)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-de85b06438 advisory. New upstream release 2442363 fixing various security issues Tenable has extracted the preceding description block directly from the Fedora security...

[SECURITY] Fedora 42 Update: opensc-0.27.1-1.fc42

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

[SECURITY] Fedora 43 Update: opensc-0.27.1-1.fc43

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...

Fedora 43 : opensc (2026-4440b00e25)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4440b00e25 advisory. New upstream release 2442363 fixing various security issues: Tenable has extracted the preceding description block directly from the Fedora security...

opensc-0.27.1-1.1 on GA media (moderate)

opensc-0.27.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10475-1 Rating: moderate Cross-References: CVE-2025-13763 CVE-2025-49010 CVE-2025-66037 CVE-2025-66038 CVE-2025-66215 CVSS scores: CVE-2025-49010 SUSE : 3.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2025-49010 SUSE : 1...

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

...

OpenSC: Out of Bounds vulnerability

...

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

...

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

...

PT-2026-29807

Name of the Vulnerable Software and Affected Versions opensc affected versions not specified Description These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information about a newer version that...

Linux Distros Unpatched Vulnerability : CVE-2025-13763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB...

OPENSUSE-SU-2026:10475-1 opensc-0.27.1-1.1 on GA media

These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-66037

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzzpkcs15reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, scpkcs15pubkeyfromspkifields allocates a zero-length buffer...