PT-2020-16462
CVE-2020-26570
·
Published
2020-10-06
·
Updated
2024-06-15
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
OpenSC versions prior to 0.21.0-rc1
Description
The issue is related to a heap-based buffer overflow in the Oberthur smart card software driver, specifically in the sc oberthur read file function.
Recommendations
For versions prior to 0.21.0-rc1, update to version 0.21.0-rc1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾