Vulnerability Database · OSS-Fuzz · opensc · Version
opensc 0.24.0-rc2
0.24.0-rc2 is affected by 28 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 10 Medium 14 Low 0 Unrated 4
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
opensc 0.24.0-rc2 vulnerabilities
28 vulnerabilities cover opensc 0.24.0-rc2. Scroll the table for all of them, or open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Critical UNKNOWN READ Vulnerability in OpenSC Package | N/A medium | 39e8771238adf2e3ea0c3b23285b6825a8feaceb | 06 Jun 2026 |
| Stack-buffer-overflow in asn1_decode_entry in opensc | N/A medium | 2fb0d735b433a7d5618865be5280e41e78362b5e | 27 Nov 2023 |
| Invalid-free vulnerability in opensc package | N/A unrated | 4013a807492568bf9907cfb3df41f130ac83c7b9 | 15 Nov 2023 |
| Heap-buffer-overflow in iasecc_parse_acls in OpenSC | N/A medium | 8fc2c20c3f895569eeb58328bb882aec07325d3b | 08 Nov 2023 |
| Heap-buffer-overflow in iasecc_parse_get_tlv in OpenSC | N/A medium | 83b9129bd3cfc6ac57d5554e015c3df85f5076dc | 11 Oct 2023 |
| Stack-buffer-overflow in iasecc_crt_parse in opensc | N/A medium | 2a4921ab23fd0853f327517636c50de947548161 | 28 Aug 2023 |
| Stack-buffer-overflow in sc_pkcs15_get_lastupdate in opensc | N/A medium | 245efe608d083fd4e4ec96793fdefd218e26fde7 | 23 Jul 2023 |
| Stack-buffer-overflow in sc_path_print in opensc | N/A medium | No fix published | 14 May 2023 |
| Stack-buffer-overflow in sc_pkcs15init_rmdir in opensc | N/A high | 578aed8391ef117ca64a9e0cba8e5c264368a0ec | 03 Dec 2022 |
| Stack-buffer-overflow in msc_zero_object in opensc | N/A high | No fix published | 24 Nov 2022 |
| Stack-buffer-overflow in authentic_get_tagged_data in opensc | N/A unrated | No fix published | 20 Nov 2022 |
| Heap-double-free vulnerability in OpenSC | N/A high | 1e4222efcf6d889adaab9d28f32623e5e1055042 | 27 Sep 2022 |
| Stack-buffer-overflow in sc_hsm_decode_ecdsa_signature in OpenSC | N/A high | 581b93543abbeda6c17a5da11e2cf82401824bef | 29 Aug 2022 |
| Heap-buffer-overflow in myeid_create_key in opensc | N/A high | 367c3ad2ef2c10cb29602f72163e7fb23c3f5827 | 02 Jun 2022 |
| Heap-buffer-overflow in sc_pkcs15init_delete_by_path in opensc | N/A medium | 1e6558ad6fb4cb508bd6a9d115e0899eaf6d3926 | 14 Apr 2022 |
| Heap-buffer-overflow in cosm_new_file in opensc | N/A high | 089cedc7520fbb9e0e4a912c4c3866a1aa429de6 | 26 Mar 2022 |
| OpenSC: Segv on unknown address in sc_file_clear_acl_entries | N/A unrated | 8697a01850d5e02a3099acd5160d0a0ee2d31077 | 24 Mar 2022 |
| Stack-use-after-return in template_sanity_check in opensc | N/A unrated | 8697a01850d5e02a3099acd5160d0a0ee2d31077 | 21 Mar 2022 |
| Stack-buffer-overflow in sc_format_oid in OpenSC | N/A medium | 4d7368fd3519a4778765b8eb818af0941a8d4f25 | 12 Mar 2022 |
| Heap-buffer-overflow in do_fileid in opensc | N/A high | 8697a01850d5e02a3099acd5160d0a0ee2d31077 | 11 Mar 2022 |
| Stack-buffer-overflow in insert_key in opensc | N/A medium | 78cdab949f098ad7e593d853229fccf57d749d0c | 23 Nov 2020 |
| Stack-buffer-overflow in sc_get_response in opensc | N/A high | 732ed77ad67e5303c46c0fa767929afd87076c87 | 28 Sep 2020 |
| Heap-buffer-overflow in hextoint in opensc | N/A medium | 8dd136ac240580b63ce509a1379a109026b93b5e | 08 Sep 2020 |
| Heap-buffer-overflow in asn1_decode_entry in opensc | N/A medium | 9b4b080be788a602fa8f01ac8d7e29cdaad07902 | 22 Jul 2020 |
| Heap-buffer-overflow in decode_bit_string in opensc | N/A medium | 9b4b080be788a602fa8f01ac8d7e29cdaad07902 | 22 Jul 2020 |
| Heap-buffer-overflow in decode_bit_string in OpenSC | N/A medium | 9b4b080be788a602fa8f01ac8d7e29cdaad07902 | 22 Jul 2020 |
| Stack-buffer-overflow in pgp_parse_algo_attr_blob in opensc | N/A high | 333c41c5d51450177553b8fd8cb2d710a7f7dec5 | 22 Jul 2020 |
| Heap-double-free vulnerability in opensc package | N/A high | 5557f34f5ef86cbf2d2de0ff39b591d4c836defb | 01 Jul 2020 |
Looking for another version, or everything Vulert holds for opensc?
Questions
About opensc 0.24.0-rc2
Is opensc 0.24.0-rc2 vulnerable?
Yes. 28 vulnerabilities in the Vulert database cover opensc 0.24.0-rc2: 0 critical, 10 high, 14 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.
How do I monitor opensc for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the opensc version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.