PT-2026-45451 · Opensc · Opensc

Fantasy · Published 2026-06-01 · Updated 2026-06-13 · CVE-2026-10275

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.26.2

Description A buffer overflow occurs in the pkcs11-tool Key Generation Module within the test kpgen certwrite() function of the src/tools/pkcs11-tool.c file. This issue allows for remote attacks, although the complexity is high and exploitability is considered difficult.

Recommendations Apply patch 814f745b3b6d100295f65f1935edd33d520d33ab to resolve the issue. As a temporary workaround, restrict the use of the test kpgen certwrite() function.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-10275

OPENSUSE-SU-2026:11022-1

Affected Products

Opensc

References · 18

• 🔥 https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg · Exploit
• https://github.com/OpenSC/OpenSC/pull/3684 · Patch
• https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-10275 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11022-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-10275 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-10275 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-10275 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-10275 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-10275 · Vendor Advisory
• https://github.com/OpenSC/OpenSC/issues/3682 · Note
• https://suse.com/security/cve/CVE-2026-10275 · Note
• https://vuldb.com/vuln/367568/cti · Note
• https://vuldb.com/vuln/367568 · Note
• https://vuldb.com/submit/825403 · Note