Buffer Overflows

opensc is vulnerable to buffer overflows. It is due to lack of proper handling of responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c...

CVE-2018-16393

OpenSC (opensc) is affected by CVE-2018-16393 due to buffer overflows in gemsafe_get_cert_len() inside libopensc/pkcs15-gemsafeV1.c. The vulnerability exists in OpenSC before 0.19.0-rc1 and can be triggered by processing crafted Gemsafe V1 Smartcards, potentially causing an application crash (DoS...

CVE-2018-16393: Improper Restriction of Operations within the Bounds of a Memory Buffer

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafegetcertlen in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified...