This vulnerability involves a classic buffer overflow due to copying data without checking the size of input buffers in OpenSC and related components. An attacker controlling a USB device or smart card can present malicious APDU responses that cause the software to incorrectly access or use partially initialized buffer data. This can result in a buffer overflow condition with potential impacts on confidentiality, integrity, and availability. The CVSS 3.1 base score is 4.3, reflecting a medium severity with attack vector as physical (local device), low attack complexity, no privileges required, and no user interaction needed. The vendor advisory from Red Hat is available but does not explicitly state patch availability or mitigation steps in the provided content.

Successful exploitation could allow an attacker with physical access (via a crafted USB device or smart card) to cause a buffer overflow, potentially leading to information disclosure, data integrity compromise, or denial of service. The CVSS vector indicates impacts on confidentiality, integrity, and availability, but the overall severity is medium.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2024-45619 for current remediation guidance. Until a patch is confirmed, limit exposure by restricting use of untrusted USB devices or smart cards. Follow vendor instructions once available.