CVE-2018-16424

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1

Description A double free issue exists when handling responses in the read file function in tools/egk-tool.c, which could allow attackers to cause a denial of service or possibly have other unspecified impacts by supplying crafted smartcards.

Recommendations For versions prior to 0.19.0-rc1, update to version 0.19.0-rc1 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted smartcards to minimize the risk of exploitation.