CVE-2025-66215

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.27.0

Description OpenSC is an open source smart card tools and middleware. An attacker with physical access to a computer while a user or administrator is utilizing a token can trigger a stack-based buffer overflow in the card-oberthur component. The attack requires a specifically crafted USB device or smart card that sends specially designed responses to the Application Protocol Data Units (APDUs). APDUs are messages exchanged between a smart card reader and a smart card.

Recommendations Update to version 0.27.0 or later.