AZL-89150
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89150.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89150
- Upstream
- Published
- 2026-05-29T14:16:26Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1
- Details
-
OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory() in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than 118 bytes in the Key History Object ASN.1 response.
- References