Summaryinfo

A vulnerability described as critical has been identified in OpenSC up to 0.26.x. This issue affects some unknown processing of the component USB Handler. Executing a manipulation can lead to stack-based overflow. This vulnerability is handled as CVE-2025-66215. The physical device can be targeted for the attack. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability has been found in OpenSC up to 0.26.x and classified as problematic. This vulnerability affects an unknown code block of the component USB Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.

The advisory is available at github.com. This vulnerability was named CVE-2025-66215 since 11/25/2025. The exploitation appears to be difficult. Local access is required to approach this attack. The exploitation needs additional levels of successful authentication. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 304364 (Linux Distros Unpatched Vulnerability : CVE-2025-66215), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 0.27.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (304364). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• OpenSC

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9
• 0.10
• 0.11
• 0.12
• 0.13
• 0.14
• 0.15
• 0.16
• 0.17
• 0.18
• 0.19
• 0.20
• 0.21
• 0.22
• 0.23
• 0.24
• 0.25
• 0.26

License

• open-source

Website

• Product: https://github.com/OpenSC/OpenSC/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion