CVE-2023-4535CWE-125

Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys

Medium · published November 6, 2023

CVSS v3.1
4.5
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-11-06T16:57Z
EPSS history
Timeline
  • 06 NOV 16:57Z
    Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
    cvelistv5