Matteo Marini

Name of the Vulnerable Software and Affected Versions: OpenSC (affected versions not specified) Description: A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OpenSC (affected versions not specified) Description: A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have not been initialized. This could potentially impact the confidentiality, integrity, and availability of protected information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OpenSC (affected versions not specified) Description: A buffer overflow issue in OpenSC tools and modules allows an attacker to potentially gain unauthorized access to protected information. The vulnerability can be exploited by using a crafted USB device or smart card that presents the system with a specially crafted response to APDUs, leading to incorrect access of initialized parts of partially filled buffers. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OpenSC pkcs15-init tool (affected versions not specified) Description: The issue is related to a buffer overflow in the pkcs15-init tool of the OpenSC software suite. An attacker could exploit this by using a specially crafted USB device or smart card, presenting the system with a tailored response to APDUs. This could lead to unauthorized access to protected information when buffers are partially filled with data and initialized parts of the buffer are accessed incorrectly. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA Toolkit (affected versions not specified) Description: The issue is related to an out-of-bounds read problem in the nvdisasm utility of the NVIDIA CUDA Toolkit. This can be exploited by deceiving a user into reading a malformed ELF file, potentially leading to denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OpenSC (affected versions not specified) Description: A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response APDU buffer and its length when communicating with the card. This issue may also be related to the use of uninitialized variables in the pkcs15-init utility and libopensc library, which could allow an attacker to impact the confidentiality, integrity, and availability of protected information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OpenSC (affected versions not specified) Description: The issue is related to the use of uninitialized variables in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. This could allow an attacker to impact the confidentiality and integrity of protected information. The problem is caused by missing initialization of variables expected to be initialized, such as arguments to other functions. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA CUDA toolkit (affected versions not specified) **Description** The NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm. An attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this issue may lead to a partial denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.