CVE-2024-45615CWE-457

Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

Low · published September 3, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK.

The problem is missing initialization of variables expected to be initialized (as arguments to other functions, etc.).

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2024-09-03T21:19Z
EPSS history
Timeline
  • 03 SEP 21:19Z
    Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init
    cvelistv5