{"items":[{"id":"CVE-2026-40528","published":"2026-05-29T13:38:11.831Z","updated":"2026-07-14T20:00:40.951Z","title":"OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c","severity":"LOW","score":1,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-40510","published":"2026-05-29T13:26:40.459Z","updated":"2026-07-14T20:00:28.402Z","title":"OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c","severity":"LOW","score":1,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2025-13763","published":"2026-04-23T12:27:41.820Z","updated":"2026-11-06T14:46:11.554Z","title":"Libopensc: opensc: multiple uses of uninitialized variable","severity":"MEDIUM","score":5.7,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2025-66215","published":"2026-03-30T17:06:16.996Z","updated":"2026-03-31T18:53:46.404Z","title":"OpenSC: Stack-buffer-overflow WRITE in card-oberthur","severity":"LOW","score":3.8,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2025-66038","published":"2026-03-30T17:03:55.914Z","updated":"2026-04-01T18:15:33.347Z","title":"OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers","severity":"LOW","score":3.9,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2025-66037","published":"2026-03-30T17:01:27.790Z","updated":"2026-03-30T20:14:39.203Z","title":"OpenSC: Out of Bounds vulnerability","severity":"LOW","score":3.9,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2025-49010","published":"2026-03-30T16:59:25.810Z","updated":"2026-03-30T18:38:21.684Z","title":"OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE","severity":"LOW","score":3.8,"vendor":"OpenSC","product":"OpenSC","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2025-24032","published":"2025-02-10T15:43:47.166Z","updated":"2025-05-21T15:48:59.150Z","title":"PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)","severity":"CRITICAL","score":9.2,"vendor":"OpenSC","product":"pam_pkcs11","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2025-24031","published":"2025-02-10T15:38:39.876Z","updated":"2025-02-10T15:50:52.981Z","title":"PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN","severity":"MEDIUM","score":5.1,"vendor":"OpenSC","product":"pam_pkcs11","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2013-1866","published":"2020-01-30T13:07:53.000Z","updated":"2024-08-06T15:20:35.174Z","title":"OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability","severity":"MEDIUM","score":6.1,"vendor":"OpenSC","product":"OpenSC.tokend","kev":false,"epss":0.00422,"kevAdded":null}]}