Threats tagged 'ghsa-mgc5-p43f-72pc'

A heap-based buffer overflow vulnerability exists in the libopensc OpenPGP driver. This flaw can be triggered by a crafted USB device or smart card that sends malicious responses during the card enrollment process using the pkcs15-init tool. Exploitation requires physical access and user interaction, with a high complexity level, and may lead to out-of-bound rights and potentially arbitrary code execution. The vulnerability is rated as low severity due to these exploitation constraints.