CVE-2020-26571

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.21.0-rc1

Description The issue is a stack-based buffer overflow in the sc pkcs15emu gemsafeGPK init function of the gemsafe GPK smart card software driver.

Recommendations For versions prior to 0.21.0-rc1, update to version 0.21.0-rc1 or later to resolve the issue. As a temporary workaround, consider disabling the sc pkcs15emu gemsafeGPK init function until a patch is available.