Buffer Overflow Vulnerability in OpenSC Affects Smart Card Handling
CVE-2018-16421

6.6MEDIUM

Key Information:

Vendor: Opensc Project
Status: Opensc
Vendor: CVE Published:; 4 September 2018

🔔 Create Opensc Project Vulnerability Alert

What is CVE-2018-16421?

Several buffer overflow vulnerabilities exist in OpenSC, specifically in the handling of responses from CAC Cards in the 'cac_get_serial_nr_from_CUID' function within 'libopensc/card-cac.c'. Attackers can exploit these vulnerabilities by supplying specially crafted smart cards, potentially resulting in a denial of service due to application crashes or other unspecified impacts.