Dashboard / CVE-2024-45616

CVE-2024-45616

LOW
INFO Priority: 0.01 BB Relevance: 33/100
Published: 2024-09-03 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

No Auth No Interaction

CVSS Vector Breakdown

AV: Physical
AC: High
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response APDU buffer and its length when communicating with the card.

Weakness Classification (2)

Affected Software (5)

VendorProductVersion
— — 0 < 0.26.0
opensc_project opensc < 0.26.0
redhat enterprise_linux 7.0
redhat enterprise_linux 8.0
redhat enterprise_linux 9.0

References & Advisories (3)

https://bugzilla.redhat.com/show_bug.cgi?id=2309290
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

33 / 100
✓ No authentication
✓ No user interaction

CVSS Score

3.9 / 10.0 v3.1
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

0.36%
Raw Score 0.003580
Percentile 30.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00358
2026-11-12
0.00358
2026-11-10
0.00358
2026-11-09
0.00358
2026-11-08
0.00358
2026-11-07
0.00358
2026-11-06
0.00358

Intelligence Sources

mitre ref →
nvd ref →

External Links