CVE-2025-49010CWE-121

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

Low · published March 30, 2026

CVSS v3.1
3.8
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-03-30T16:59Z
EPSS history
Timeline
  • 30 MAR 16:59Z
    OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
    cvelistv5