CVE-2026-40528
Low · 3.8CVSS
3.8
EPSS
0.2%
Published
May 29, 2026
CISA due date
—
The record
OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning with '=' followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length check, causing both stack and heap buffer overruns.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | opensc | 0 | 0.27.1-2.1 |
Related vulnerabilities
- CVE-2026-10275 A flaw has been found in OpenSC up to 0.26.1. Also affects opensc
- CVE-2025-13763 Multiple uses of uninitialized variables were found in libopensc that may lead to… Also affects opensc
- CVE-2025-66037 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2025-66038 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2025-66215 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2025-49010 OpenSC is an open source smart card tools and middleware. Also affects opensc
- CVE-2024-8443 A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. Also affects opensc
- CVE-2024-45619 A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. Also affects opensc