This vulnerability involves a classic buffer overflow due to copying data without checking the size of the input buffer in OpenSC and related components. An attacker controlling a USB device or smart card can send malicious APDU responses that exploit this flaw by causing the system to access uninitialized parts of buffers. The vulnerability affects OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector requiring low attack complexity and no privileges or user interaction. The Red Hat advisory linked does not explicitly state patch availability or remediation status in the provided content.

Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected system due to buffer overflow conditions triggered by crafted APDU responses from malicious USB devices or smart cards. The attack vector is physical or local network via USB or smart card interface, with no privileges or user interaction required.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2024-45619 for current remediation guidance. Until a patch is applied, limit use of untrusted USB devices and smart cards to reduce exposure.