Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-49010

Опубликовано: 30 мар. 2026
Источник: nvd
CVSS3: 3.8
EPSS Низкий

Описание

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.

EPSS

Процентиль: 5%
0.00019
Низкий

3.8 Low

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 3.8
ubuntu
3 дня назад

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.

CVSS3: 3.8
redhat
3 дня назад

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.

msrc
2 дня назад

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

CVSS3: 3.8
debian
3 дня назад

OpenSC is an open source smart card tools and middleware. Prior to ver ...

EPSS

Процентиль: 5%
0.00019
Низкий

3.8 Low

CVSS3

Дефекты

CWE-121