A vulnerability in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK allows an attacker with physical access to use a specially crafted USB device or smart card to cause improper access of partially initialized buffers when handling APDU responses. This can lead to low-impact confidentiality, integrity, and availability issues.