CLSA-2026-1780711381

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1780711381.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1780711381
Upstream
CVE (2)
Published
2026-06-08T19:27:59Z
Modified
2026-10-26T09:30:17Z
Summary
opensc: Fix of 2 CVEs
Details
  • CVE-2026-40510: stack buffer overflow in piv_process_history() via crafted PIV Key History Object
  • CVE-2026-40528: stack/heap buffer overrun in do_key_value() via overlong pkcs15init profile key value
References

Affected packages

TuxCare:AlmaLinux:9.2 / opensc

Package

Name
opensc
Purl
pkg:rpm/tuxcare/opensc?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.22.0-2.el9_2.tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1780711381.json"