A vulnerability in OpenSC and related components allows an attacker with physical access to use a specially crafted USB device or smart card to cause incorrect access of partially initialized buffers. This buffer handling flaw could lead to low-impact confidentiality, integrity, and availability issues. The vulnerability is identified as CWE-120 (classic buffer overflow).