CVE-2018-16423

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1

Description A double free issue when handling responses from a smartcard in the sc file set sec attr function in libopensc/sc.c could be used by attackers to cause a denial of service, potentially leading to an application crash, or possibly having other unspecified impacts.

Recommendations For versions prior to 0.19.0-rc1, update to version 0.19.0-rc1 or later to resolve the issue. As a temporary workaround, consider restricting the use of smartcards to minimize the risk of exploitation.