CVE-2026-40510

LOW 3.8

OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c

CVSS Score

3.8

EPSS Score

0.0%

EPSS Percentile

0th

OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than 118 bytes in the Key History Object ASN.1 response.

CWE	CWE-121
Vendor	opensc
Product	opensc
Published	May 29, 2026
Last Updated	Jun 1, 2026

Stay Ahead of the Next One

Get instant alerts for opensc opensc

Be the first to know when new low vulnerabilities affecting opensc opensc are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector

Physical

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Affected Versions

OpenSC / OpenSC

0 < 0.27.0-rc1 0 < 3f24f0b48a481a8cf2e46059d8238a283ddc1c13

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/OpenSC/OpenSC/pull/3558 github.com: https://github.com/OpenSC/OpenSC/commit/3f24f0b48a481a8cf2e46059d8238a283ddc1c13 vulncheck.com: https://www.vulncheck.com/advisories/opensc-stack-buffer-overflow-via-piv-process-history-in-card-piv-c

Credits

Nicholas Carlini of Anthropic