CVE-2024-45618CWE-457

Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

Low · published September 3, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs.

Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2024-09-03T21:21Z
EPSS history
Timeline
  • 03 SEP 21:21Z
    Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init
    cvelistv5