Stack-based buffer overflow in OpenSC - CVE-2025-49010

Vulnerability identifier: #VU124848

CSH Severity: Low

CVSS v4: 1 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-49010

CWE-ID: CWE-121

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker with physical access to disclose sensitive information, modify data, or cause a denial of service.

The vulnerability exists due to a stack-based buffer overflow write in the GET RESPONSE handling in libopensc when processing specially crafted responses to APDU requests from a crafted USB device or smart card. An attacker with physical access can present a crafted USB device or smart card to trigger the overflow and disclose sensitive information, modify data, or cause a denial of service.

User interaction is required while a user or administrator is using a token, and the issue is considered high complexity.

OpenSC
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Anolis OS
openEuler
Fedora
opensc-debugsource
opensc-debuginfo
opensc
opensc-help
opensc-doc
opensc-libs

Install security update from vendor's website.

OpenSC - update to 0.27.0
opensc-debugsource - update to 0.19.0-150100.3.34.1
opensc-debuginfo - update to 0.19.0-150100.3.34.1
opensc - update to 0.19.0-150100.3.34.1
opensc-help - update to 0.23.0-8
opensc-debugsource - update to 0.23.0-8
opensc-debuginfo - update to 0.23.0-8
opensc - update to 0.23.0-8
opensc-doc - update to 0.26.1-2
opensc-libs - update to 0.26.1-2
opensc - update to 0.26.1-2
opensc - addressed in versions 0.27.1-1.fc42, 0.27.1-1.fc43, 0.27.1-1.fc44

• https://github.com/OpenSC/OpenSC/security/advisories/GHSA-q5cf-5wmx-9wh4
• https://github.com/OpenSC/OpenSC/wiki/CVE-2025-49010

• Multiple vulnerabilities in OpenSC
• Fedora 44 update for opensc
• Fedora 43 update for opensc
• Fedora 42 update for opensc
• SUSE update for opensc
• Anolis OS update for opensc
• openEuler 24.03 LTS SP3 update for opensc
• openEuler 24.03 LTS SP1 update for opensc