CVE-2019-19481

MEDIUM

OpenSC <0.20.0-rc3 - Buffer Overflow

Title source: llm

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.

Core 4

Core References

Patch x_refsource_misc

Permissions Required, Third Party Advisory x_refsource_misc

Mailing List mailing-list x_refsource_mlist

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

CVSS v3 4.6

EPSS 0.0012

EPSS Percentile 30.9%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-119

Status published

Products (2)

opensc_project/opensc 0.19.0

opensc_project/opensc 0.20.0 rc1 (3 CPE variants)

Published Dec 01, 2019

Tracked Since Feb 18, 2026