Skip to content
CVE PROGRAM SOURCE RECORD1.0 Low

CVE-2026-40528

OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning with '=' followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length check, causing both stack and heap buffer overruns.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenSC OpenSC

Default version status: affected

  • 0 to < 0.27.0affected
  • 0 to < 0358817ec74aeca654f83e7709c7720b14c5db59affected
pkg:github/OpenSC/OpenSC

References