Количество 8
Количество 8
CVE-2025-66037
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.
CVE-2025-66037
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.
CVE-2025-66037
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.
CVE-2025-66037
OpenSC: Out of Bounds vulnerability
CVE-2025-66037
OpenSC is an open source smart card tools and middleware. Prior to ver ...
openSUSE-SU-2026:20967-1
Security update for opensc
SUSE-SU-2026:2697-1
Security update for opensc
SUSE-SU-2026:2657-1
Security update for opensc
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0. | CVSS3: 3.9 | 0% Низкий | 5 месяцев назад |
 | CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0. | CVSS3: 3.9 | 0% Низкий | 5 месяцев назад |
 | CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0. | CVSS3: 3.9 | 0% Низкий | 5 месяцев назад |
 | CVE-2025-66037 OpenSC: Out of Bounds vulnerability | CVSS3: 3.9 | 0% Низкий | 5 месяцев назад |
| CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Prior to ver ... | CVSS3: 3.9 | 0% Низкий | 5 месяцев назад |
 | openSUSE-SU-2026:20967-1 Security update for opensc | 2 месяца назад | ||
| SUSE-SU-2026:2697-1 Security update for opensc | около 2 месяцев назад | ||
| SUSE-SU-2026:2657-1 Security update for opensc | около 2 месяцев назад |
Уязвимостей на страницу