CVE-2019-19480

Name of the Vulnerable Software and Affected Versions OpenSC versions 0.19.0 and earlier OpenSC versions 0.20.x through 0.20.0-rc3

Description An issue was discovered in the libopensc/pkcs15-prkey.c file, where there is an incorrect free operation in the sc pkcs15 decode prkdf entry function.

Recommendations For OpenSC versions 0.19.0 and earlier, update to a version later than 0.19.0 to resolve the issue. For OpenSC versions 0.20.x through 0.20.0-rc3, update to a version later than 0.20.0-rc3 to resolve the issue. As a temporary workaround, consider restricting access to the sc pkcs15 decode prkdf entry function until a patch is available.