A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade openscUpgrade opensc-debuginfo | Jul 4, 2023 | Apr 18, 2022 |
| Debian | — | Upgrade opensc | Jun 22, 2023 | Apr 18, 2022 |
| Gentoo Linux | — | Upgrade dev-libs/opensc. | Sep 8, 2022 | Apr 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2022 |
| Suse | — | Upgrade libopensc2-32bitUpgrade opensc-32bitUpgrade openscUpgrade libopensc2 | Oct 30, 2021 | Oct 29, 2021 |
| Ubuntu | — | Upgrade openscUpgrade opensc (Ubuntu Pro)Upgrade opensc-pkcs11 (Ubuntu Pro)Upgrade opensc-pkcs11 | Mar 13, 2025 | Apr 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub