Source: opensc Version: 0.27.1-2 X-Debbugs-CC: [email protected] Severity: important Tags: security upstream Forwarded: https://github.com/OpenSC/OpenSC/pull/3812
Hi, The following vulnerability was published for opensc. CVE-2026-103531[0]: | A flaw has been found in OpenSC up to 0.27.1. The impacted element | is the function setcos_construct_fci_44 of the file | src/libopensc/card-setcos.c. Executing a manipulation of the | argument type_attr can lead to stack-based buffer overflow. The | attack can be launched remotely. This patch is called | ad730304052937c32b4eb489a06835ac6123632c. It is best practice to | apply a patch to resolve this issue. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-103531 https://www.cve.org/CVERecord?id=CVE-2026-103531 [1] https://github.com/OpenSC/OpenSC/pull/3812 Please adjust the affected versions in the BTS as needed. Regards, Salvatore
