A use-after-free vulnerability exists in the AuthentIC driver of OpenSC packages during the card enrolment process using pkcs15-init. Exploitation requires physical access and a crafted USB device or smart card to send specially crafted APDU responses. The vulnerability is considered low severity with high attack complexity and limited impact on confidentiality and integrity. Red Hat Enterprise Linux versions 7, 8, and 9 are not affected as the vulnerable code was not backported. No fix is currently indicated for affected OpenSC upstream versions.