Dashboard / CVE-2023-4535

CVE-2023-4535

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 24/100
Published: 2023-11-06 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

No Auth Scope Change

CVSS Vector Breakdown

AV: Physical
AC: High
PR: None
UI: Required
S: Changed
C: Low
I: Low
A: Low

Description

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
fedoraproject fedora 38
fedoraproject fedora 39
opensc_project opensc 0.23.0
opensc_project opensc 0.23.0
opensc_project opensc 0.23.0
redhat enterprise_linux 9.0

References & Advisories (9)

Bug Bounty Relevance

24 / 100
✓ No authentication

CVSS Score

4.5 / 10.0 v3.1
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS — Exploitation Probability

0.49%
Raw Score 0.004870
Percentile 42.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00487
2026-11-12
0.00487
2026-11-10
0.00487
2026-11-09
0.00487
2026-11-08
0.00487
2026-11-07
0.00487
2026-11-06
0.00523

Intelligence Sources

mitre ref →
nvd ref →

External Links