Threats affecting pkg:github/opensc/OpenSC

CVE-2026-103531 is a medium severity stack-based buffer overflow vulnerability in OpenSC versions 0.27.0 and 0.27.1. The flaw exists in the function setcos_construct_fci_44 within src/libopensc/card-setcos.c. An attacker can remotely trigger this vulnerability by manipulating the argument type_attr, potentially causing a buffer overflow on the stack. A patch identified by commit ad730304052937c32b4eb489a06835ac6123632c is available to address this issue.

A buffer overflow vulnerability exists in OpenSC versions 0.26.0 and 0.26.1 within the test_kpgen_certwrite function of the pkcs11-tool Key Generation Module. Exploitation requires high attack complexity and user interaction, and while an exploit has been published, successful exploitation is considered difficult. The vulnerability has a low CVSS score of 2.3.

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise key generation, certificate loading, and other card management operations during enrollment.