CVE-2024-8443
LOW
INFO
Priority: 0.01
BB Relevance:
21/100
Published: 2024-09-10
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
No Auth
CVSS Vector Breakdown
AV:
Physical
AC:
High
PR:
None
UI:
Required
S:
Unchanged
C:
Low
I:
Low
A:
None
Description
A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-of-bound rights, possibly resulting in arbitrary code execution.
Weakness Classification (2)
Affected Software (5)
| Vendor | Product | Version |
|---|---|---|
| — | — | 0.26.0 < 0.26.0 |
| opensc_project | opensc | - |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
References & Advisories (3)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT