Denial of Service Vulnerability in OpenSC Smartcard Handling
CVE-2018-16423

6.6MEDIUM

Key Information:

Vendor: Opensc Project
Status: Opensc
Vendor: CVE Published:; 4 September 2018

🔔 Create Opensc Project Vulnerability Alert

What is CVE-2018-16423?

A vulnerability exists in OpenSC that could allow attackers to exploit a double free condition when processing responses from crafted smartcards. This issue occurs in the function sc_file_set_sec_attr within libopensc/sc.c, affecting versions prior to 0.19.0-rc1. Successful exploitation may lead to application crashes, resulting in denial of service and potentially allowing further unspecified impacts.