OpenSC

Products

ProductCVEsExploitedLatest
OpenSC7–May 29, 2026
pam_pkcs112–Feb 10, 2025

Exploited and recent CVEs

  • CVE-2026-40528 Low 3.8 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c 0.2%
  • CVE-2026-40510 Low 3.8 OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c 0.3%
  • CVE-2025-13763 Medium 5.7 Libopensc: opensc: multiple uses of uninitialized variable 0.3%
  • CVE-2025-66215 Low 3.8 OpenSC: Stack-buffer-overflow WRITE in card-oberthur 0.2%
  • CVE-2025-66038 Low 3.9 OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers 0.3%
  • CVE-2025-66037 Low 3.9 OpenSC: Out of Bounds vulnerability 0.3%
  • CVE-2025-49010 Low 3.8 OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE 0.1%
  • CVE-2025-24032 Critical 9.2 PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`) 0.7%
  • CVE-2025-24031 Medium 5.1 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN 0.1%