CVE-2025-66215CWE-121

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

Low · published March 30, 2026

CVSS v3.1
3.8
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-03-30T17:06Z
EPSS history
Timeline
  • 30 MAR 17:06Z
    OpenSC: Stack-buffer-overflow WRITE in card-oberthur
    cvelistv5