Log in Start free

Vulnerability · Published Jun 1, 2026 · Assigned by VulDB

CVE-2026-10275OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

Medium 5.0

In plain English

A medium-severity buffer overflow in OpenSC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.0Medium
Exploit odds (30 days)0.3%top 77.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12openscno fix listedDEBIAN-CVE-2026-10275
Debian:13openscno fix listedDEBIAN-CVE-2026-10275
Debian:14opensc0.27.1-2DEBIAN-CVE-2026-10275
Ubuntu:25.10openscno fix listedUBUNTU-CVE-2026-10275
Ubuntu:26.04:LTSopenscno fix listedUBUNTU-CVE-2026-10275
Ubuntu:26.10openscno fix listedUBUNTU-CVE-2026-10275

Affected products (as reported)

VendorProductVersions
n/a OpenSC 0.26.00.26.1

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References