CVE-2023-40661

Name of the Vulnerable Software and Affected Versions OpenSC (affected versions not specified)

Description The issue is related to several memory vulnerabilities within the OpenSC packages, specifically in the card enrollment process using pkcs15-init. An attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise of key generation, certificate loading, and other card management operations during enrollment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.