CVE-2018-16426

MEDIUM

OpenSC <0.19.0-rc1 - Use After Free

Title source: llm
STIX 2.1

Description

Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.

References (5)

Core 5
Core References
Patch, Release Notes, Third Party Advisory x_refsource_misc
https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
Exploit, Third Party Advisory x_refsource_misc
https://www.x41-dsec.de/lab/advisories/x41-2018-002-OpenSC/
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2154
Mailing List mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/09/msg00009.html

Scores

CVSS v3 4.3
EPSS 0.0018
EPSS Percentile 39.1%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-674
Status published
Products (1)
opensc_project/opensc < 0.18.0
Published Sep 04, 2018
Tracked Since Feb 18, 2026