CVE-2026-10275: Buffer Overflow in OpenSC
A buffer overflow vulnerability exists in OpenSC versions 0.26.0 and 0.26.1 within the test_kpgen_certwrite function of the pkcs11-tool Key Generation Module. Exploitation requires high attack complexity and user interaction, and while an exploit has been published, successful exploitation is considered difficult. The vulnerability has a low CVSS score of 2.3.
AI Analysis
Technical Summary
CVE-2026-10275 is a buffer overflow vulnerability affecting OpenSC versions 0.26.0 and 0.26.1. It occurs in the test_kpgen_certwrite function of the pkcs11-tool Key Generation Module. The vulnerability can be exploited remotely but requires high attack complexity and user interaction. An exploit is publicly available, though exploitation is difficult. A patch identified by commit 814f745b3b6d100295f65f1935edd33d520d33ab is recommended to remediate the issue.
Potential Impact
The vulnerability allows a buffer overflow which could potentially lead to memory corruption. However, due to the high attack complexity and requirement for user interaction, the risk of exploitation is low. The CVSS score of 2.3 reflects a low severity impact.
Mitigation Recommendations
A patch fixing this vulnerability is available as identified by commit 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to update OpenSC to a version including this patch to remediate the issue. No official vendor advisory was provided, so verify patch availability from the OpenSC project repository or trusted sources.
CVE-2026-10275: Buffer Overflow in OpenSC
Description
A buffer overflow vulnerability exists in OpenSC versions 0.26.0 and 0.26.1 within the test_kpgen_certwrite function of the pkcs11-tool Key Generation Module. Exploitation requires high attack complexity and user interaction, and while an exploit has been published, successful exploitation is considered difficult. The vulnerability has a low CVSS score of 2.3.
CVSS v4.0
Score 2.3low
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-10275 is a buffer overflow vulnerability affecting OpenSC versions 0.26.0 and 0.26.1. It occurs in the test_kpgen_certwrite function of the pkcs11-tool Key Generation Module. The vulnerability can be exploited remotely but requires high attack complexity and user interaction. An exploit is publicly available, though exploitation is difficult. A patch identified by commit 814f745b3b6d100295f65f1935edd33d520d33ab is recommended to remediate the issue.
Potential Impact
The vulnerability allows a buffer overflow which could potentially lead to memory corruption. However, due to the high attack complexity and requirement for user interaction, the risk of exploitation is low. The CVSS score of 2.3 reflects a low severity impact.
Mitigation Recommendations
A patch fixing this vulnerability is available as identified by commit 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to update OpenSC to a version including this patch to remediate the issue. No official vendor advisory was provided, so verify patch availability from the OpenSC project repository or trusted sources.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-31T16:00:08.522Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1dbb9de29bf47b501c569b
Added to database: 06/01/2026, 17:04:29 UTC
Last enriched: 06/19/2026, 19:28:00 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.