Buffer Overrun Vulnerability in OpenSC's PKCS15 Function

CVE-2023-2977

What is CVE-2023-2977?

A vulnerability exists in OpenSC that allows an attacker to exploit a buffer overrun in the pkcs15 cardos_have_verifyrc_package function. This occurs when a malformed ASN.1 context is supplied within a smart card package. Due to incorrect length calculations from a shifted starting pointer, this flaw may lead to a potential heap-based out-of-bounds read. If AddressSanitizer (ASAN) is engaged during compilation, it may result in application crashes, while further information leakage or additional exploitation could extend the risks.

References