The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26571
Reference (s):
- FEDORA:FEDORA-2020-7c80831ffe
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/EXOHFDMNMO6IDECAGUTB3SJGAGXVRT6S/
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20612
- MLIST:[debian-lts-announce] 20211129 [SECURITY] [DLA 2832-1] opensc security update
- URL: https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html