← back
CVE-2021-42781CWE-119

CVE-2021-42781

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.9%
exploitation probability
2.9%top 14% of all CVEs
observed exploitation
nono source reports it
Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.
Affected products
n/a · opensc
References
https://bugzilla.redhat.com/show_bug.cgi?id=2016439https://github.com/OpenSC/OpenSC/commit/05648b06https://github.com/OpenSC/OpenSC/commit/17d8980chttps://github.com/OpenSC/OpenSC/commit/40c50a3ahttps://github.com/OpenSC/OpenSC/commit/5d4daf6chttps://github.com/OpenSC/OpenSC/commit/cae5c71fhttps://lists.debian.org/debian-lts-announce/2023/06/msg00025.htmlhttps://lists.debian.org/debian-lts-announce/2024/12/msg00026.htmlhttps://security.gentoo.org/glsa/202209-03