CVE-2021-42778

MEDIUM

OpenSC < 0.22.0 - Double Free in sc_pkcs15_free_tokeninfo

Title source: llm

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

Core 5

Core References

Issue Tracking, Mailing List, Patch, Third Party Advisory x_refsource_misc

Issue Tracking, Patch, Third Party Advisory x_refsource_misc

Patch, Third Party Advisory x_refsource_misc

Third Party Advisory vendor-advisory x_refsource_gentoo

Mailing List

CVSS v3 5.3

EPSS 0.0203

EPSS Percentile 78.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-415 CWE-672

Status published

Products (4)

fedoraproject/fedora 33

opensc_project/opensc < 0.22.0

redhat/enterprise_linux 7.0

redhat/enterprise_linux 8.0

Published Apr 18, 2022

Tracked Since Feb 18, 2026