CVE-2018-16393

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.19.0-rc1

Description The issue is related to several buffer overflows that occur when handling responses from a Gemsafe V1 Smartcard in the gemsafe get cert len function in libopensc/pkcs15-gemsafeV1.c. This could be exploited by attackers who can supply crafted smartcards, potentially leading to a denial of service (application crash) or other unspecified impacts.

Recommendations For OpenSC versions prior to 0.19.0-rc1, update to version 0.19.0-rc1 or later to resolve the issue.