Stack Buffer Overflow in OpenSC Smart Card Middleware

CVE-2025-66215

What is CVE-2025-66215?

OpenSC, an open-source middleware for smart card tools, contains a vulnerability that allows an attacker with physical access to a computer to exploit a stack-buffer overflow condition. This occurs specifically when the user or administrator interacts with a token. The attack can be executed using a specially crafted USB device or smart card that returns custom responses to APDU commands. The vulnerability has been addressed in version 0.27.0, which users are encouraged to upgrade to in order to mitigate potential risks.

References