CVE-2018-16391

概要

参考情報

• access.redhat.com/errata/RHSA-2019:2154
• OpenSC/OpenSC commit 360e95d · Patch
• OpenSC/OpenSC release 0.19.0-rc1 · Third Party Advisory
• lists.debian.org/debian-lts-announce/2019/09/msg00009.html
• x41-dsec.de/lab/advisories/x41-2018-002-OpenSC · Exploit

opensc のその他の脆弱性

• CVE-2026-40528高 7.8OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/…
• CVE-2026-40510中 6.8OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/…
• CVE-2025-66215中 6.8OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the t…
• CVE-2025-66038中 6.8OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for …
• CVE-2025-66037中 6.8OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness…