CVE-2025-13763
Medium · 5.7CVSS
5.7
EPSS
0.3%
Published
Apr 23, 2026
CISA due date
—
The record
Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | opensc | 0 | 0.27.1-1.1 |
Related vulnerabilities
- CVE-2026-10275 A flaw has been found in OpenSC up to 0.26.1. Also affects opensc
- CVE-2026-40528 OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun… Also affects opensc
- CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2025-66038 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2025-66215 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2025-49010 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2024-8443 A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. Also affects opensc
- CVE-2024-45619 A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. Also affects opensc