Stack-based buffer overflow in OpenSC - CVE-2025-66215

Vulnerability identifier: #VU124850

CSH Severity: Low

CVSS v4: 1 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-66215

CWE-ID: CWE-121

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker with physical access to corrupt memory.

The vulnerability exists due to stack-based buffer overflow in the card-oberthur driver when processing specially crafted responses to APDUs from a crafted USB device or smart card. An attacker with physical access can present a crafted USB device or smart card to corrupt memory.

User interaction is required while a user or administrator uses a token, and the issue affects the oberthur card driver in libopensc.

OpenSC
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Anolis OS
Fedora
opensc-debugsource
opensc-debuginfo
opensc
opensc-libs
opensc-doc

Install security update from vendor's website.

OpenSC - update to 0.27.0
opensc-debugsource - update to 0.19.0-150100.3.34.1
opensc-debuginfo - update to 0.19.0-150100.3.34.1
opensc - update to 0.19.0-150100.3.34.1
opensc - update to 0.26.1-2
opensc-libs - update to 0.26.1-2
opensc-doc - update to 0.26.1-2
opensc - addressed in versions 0.27.1-1.fc42, 0.27.1-1.fc43, 0.27.1-1.fc44

• https://github.com/OpenSC/OpenSC/security/advisories/GHSA-q5fc-cw56-hwp2
• https://github.com/OpenSC/OpenSC/wiki/CVE-2025-66215

• Multiple vulnerabilities in OpenSC
• Fedora 44 update for opensc
• Fedora 43 update for opensc
• Fedora 42 update for opensc
• SUSE update for opensc
• Anolis OS update for opensc