CVE-2025-49010lowCWE-121

CVE-2025-49010: fallo de gravedad baja en OpenSC

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

Publicada el

Seguir esta CVE+ Monitorear OpenSC+ Monitorear opensc

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.8epss 0.1%
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Productos afectados
OpenSC · OpenSC
CVEs relacionadas — OpenSC

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-40510LOWOpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.cEPSS 0.3%CVE-2025-66038LOWOpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointersEPSS 0.3%CVE-2025-13763MEDIUMLibopensc: opensc: multiple uses of uninitialized variableEPSS 0.3%CVE-2025-66037LOWOpenSC: Out of Bounds vulnerabilityEPSS 0.3%CVE-2026-40528LOWOpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.cEPSS 0.2%CVE-2025-66215LOWOpenSC: Stack-buffer-overflow WRITE in card-oberthurEPSS 0.2%