https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T23:33:40.909901+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-42780 CVE-2021-42780 2026-09-28T23:33:40.970306+00:00

Affected: opensc

A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.

 https://vulnerability.circl.lu/vuln/usn-7346-1 USN-7346-1 — opensc vulnerabilities 2026-09-28T23:33:40.970384+00:00

Affected: Ubuntu:Pro:16.04:LTS: opensc, Ubuntu:Pro:18.04:LTS: opensc, Ubuntu:Pro:20.04:LTS: opensc, Ubuntu:Pro:22.04:LTS: opensc, Ubuntu:Pro:24.04:LTS: opensc

It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-42780)

It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a stack buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-42782)

It was discovered that OpenSC did not correctly handle the length of certain buffers, which could lead to a out-of-bounds access vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-2977)

Deepanjan Pal discovered that OpenSC did not correctly authenticate a zero length PIN. A physically proximate attacker could possibly use this issue to gain unauthorized access to certain systems. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-40660)

It was discovered that OpenSC did not correctly handle certain memory operations. A physically proximate attacker could possibly use this issue to compromise key generation, certificate loading and other card management operations. This issue…