Vulnerability Database · OSS-Fuzz · opensc · Version
opensc 0.23.0
0.23.0 is affected by 29 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 10 Medium 15 Low 0 Unrated 4
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
opensc 0.23.0 vulnerabilities
29 vulnerabilities cover opensc 0.23.0. Scroll the table for all of them, or open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Critical UNKNOWN READ Vulnerability in OpenSC Package | N/A medium | 39e8771238adf2e3ea0c3b23285b6825a8feaceb | 06 Jun 2026 |
| Stack-buffer-overflow in asn1_decode_entry in opensc | N/A medium | 2fb0d735b433a7d5618865be5280e41e78362b5e | 27 Nov 2023 |
| Invalid-free vulnerability in opensc package | N/A unrated | 4013a807492568bf9907cfb3df41f130ac83c7b9 | 15 Nov 2023 |
| Heap-buffer-overflow in iasecc_parse_acls in OpenSC | N/A medium | 8fc2c20c3f895569eeb58328bb882aec07325d3b | 08 Nov 2023 |
| Heap-buffer-overflow in iasecc_parse_get_tlv in OpenSC | N/A medium | 83b9129bd3cfc6ac57d5554e015c3df85f5076dc | 11 Oct 2023 |
| Stack-buffer-overflow in iasecc_crt_parse in opensc | N/A medium | 2a4921ab23fd0853f327517636c50de947548161 | 28 Aug 2023 |
| Stack-buffer-overflow in sc_pkcs15_get_lastupdate in opensc | N/A medium | 245efe608d083fd4e4ec96793fdefd218e26fde7 | 23 Jul 2023 |
| Stack-buffer-overflow in sc_path_print in opensc | N/A medium | No fix published | 14 May 2023 |
| Stack-buffer-overflow in sc_pkcs15init_rmdir in opensc | N/A high | 578aed8391ef117ca64a9e0cba8e5c264368a0ec | 03 Dec 2022 |
| Stack-buffer-overflow in msc_zero_object in opensc | N/A high | No fix published | 24 Nov 2022 |
| Stack-buffer-overflow in authentic_get_tagged_data in opensc | N/A unrated | No fix published | 20 Nov 2022 |
| Stack-buffer-overflow in sc_path_print in opensc | N/A medium | bdb89174cd5441a279feea258c2792abbbe024ac | 16 Nov 2022 |
| Heap-double-free vulnerability in OpenSC | N/A high | 1e4222efcf6d889adaab9d28f32623e5e1055042 | 27 Sep 2022 |
| Stack-buffer-overflow in sc_hsm_decode_ecdsa_signature in OpenSC | N/A high | 581b93543abbeda6c17a5da11e2cf82401824bef | 29 Aug 2022 |
| Heap-buffer-overflow in myeid_create_key in opensc | N/A high | 367c3ad2ef2c10cb29602f72163e7fb23c3f5827 | 02 Jun 2022 |
| Heap-buffer-overflow in sc_pkcs15init_delete_by_path in opensc | N/A medium | 1e6558ad6fb4cb508bd6a9d115e0899eaf6d3926 | 14 Apr 2022 |
| Heap-buffer-overflow in cosm_new_file in opensc | N/A high | 089cedc7520fbb9e0e4a912c4c3866a1aa429de6 | 26 Mar 2022 |
| OpenSC: Segv on unknown address in sc_file_clear_acl_entries | N/A unrated | 8697a01850d5e02a3099acd5160d0a0ee2d31077 | 24 Mar 2022 |
| Stack-use-after-return in template_sanity_check in opensc | N/A unrated | 8697a01850d5e02a3099acd5160d0a0ee2d31077 | 21 Mar 2022 |
| Stack-buffer-overflow in sc_format_oid in OpenSC | N/A medium | 4d7368fd3519a4778765b8eb818af0941a8d4f25 | 12 Mar 2022 |
| Heap-buffer-overflow in do_fileid in opensc | N/A high | 8697a01850d5e02a3099acd5160d0a0ee2d31077 | 11 Mar 2022 |
| Stack-buffer-overflow in insert_key in opensc | N/A medium | 78cdab949f098ad7e593d853229fccf57d749d0c | 23 Nov 2020 |
| Stack-buffer-overflow in sc_get_response in opensc | N/A high | 732ed77ad67e5303c46c0fa767929afd87076c87 | 28 Sep 2020 |
| Heap-buffer-overflow in hextoint in opensc | N/A medium | 8dd136ac240580b63ce509a1379a109026b93b5e | 08 Sep 2020 |
| Heap-buffer-overflow in asn1_decode_entry in opensc | N/A medium | 9b4b080be788a602fa8f01ac8d7e29cdaad07902 | 22 Jul 2020 |
| Heap-buffer-overflow in decode_bit_string in opensc | N/A medium | 9b4b080be788a602fa8f01ac8d7e29cdaad07902 | 22 Jul 2020 |
| Heap-buffer-overflow in decode_bit_string in OpenSC | N/A medium | 9b4b080be788a602fa8f01ac8d7e29cdaad07902 | 22 Jul 2020 |
| Stack-buffer-overflow in pgp_parse_algo_attr_blob in opensc | N/A high | 333c41c5d51450177553b8fd8cb2d710a7f7dec5 | 22 Jul 2020 |
| Heap-double-free vulnerability in opensc package | N/A high | 5557f34f5ef86cbf2d2de0ff39b591d4c836defb | 01 Jul 2020 |
Looking for another version, or everything Vulert holds for opensc?
Questions
About opensc 0.23.0
Is opensc 0.23.0 vulnerable?
Yes. 29 vulnerabilities in the Vulert database cover opensc 0.23.0: 0 critical, 10 high, 15 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.
How do I monitor opensc for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the opensc version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.