Use After Return Vulnerability in OpenSC Library
CVE-2021-42780

5.3MEDIUM

Key Information:

Vendor

Opensc Project

Status
Opensc
Vendor
CVE Published:
18 April 2022

What is CVE-2021-42780?

A use after return vulnerability was identified in the OpenSC library prior to version 0.22.0, specifically within the insert_pin function. This issue can lead to program crashes for any applications that rely on this library, potentially impacting stability and security. Users and developers are encouraged to update to version 0.22.0 or later to mitigate any associated risks.

Affected Version(s)

opensc opensc 0.22.0

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383
https://bugzilla.redhat.com/show_bug.cgi?id=2016139
https://github.com/OpenSC/OpenSC/commit/5df913b7

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.