Information Disclosure Vulnerability in OpenSC by LibOpenSC
CVE-2025-13763

5.7MEDIUM

Key Information:

Vendor

Opensc

Status
Opensc
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
23 April 2026

What is CVE-2025-13763?

Multiple instances of uninitialized variables have been identified in LibOpenSC, potentially leading to information disclosure or application crashes. An attacker can exploit this vulnerability by using a specially crafted USB device or smart card that sends tailored responses to the APDUs, which may affect the integrity of the application or reveal sensitive information.

Affected Version(s)

OpenSC 0 < 0.27.0

References

https://access.redhat.com/security/cve/CVE-2025-13763
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2417581
issue-trackingx_refsource_REDHAT
https://github.com/OpenSC/OpenSC/security/advisories/GHSA...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.