CVE-2019-15946

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.20.0-rc1

Description The issue is related to an out-of-bounds access of an ASN.1 Octet string in the asn1 decode entry function in libopensc/asn1.c. This can allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 0.20.0-rc1, update to version 0.20.0-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the asn1 decode entry function in libopensc/asn1.c until a patch is available.