Denial of Service Vulnerability in OpenSC eGK Card Tool
CVE-2018-16424

6.6MEDIUM

Key Information:

Vendor: Opensc Project
Status: Opensc
Vendor: CVE Published:; 4 September 2018

🔔 Create Opensc Project Vulnerability Alert

What is CVE-2018-16424?

A double free vulnerability exists in the response handling of the eGK card tool within OpenSC software prior to version 0.19.0-rc1. This flaw allows attackers who can supply specially crafted smartcards to exploit the issue, potentially leading to a denial of service condition, where the application may crash or experience other unanticipated consequences.