OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
概要
OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2025-49010 opensc
- Ubuntu UBUNTU-CVE-2025-49010 opensc
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com