CVE-2025-66037: OpenSC: Out of Bounds vulnerability

Published Mar 30, 2026
·
Updated

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzzpkcs15reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, scpkcs15pubkeyfromspkifields() allocates a zero-length buffer and then reads one byte past the end of that allocation. This issue has been patched in version 0.27.0.

Affected Software

4 affected componentsFixes available
OpenSC OpenSC<0.27.0
Opensc Project Opensc<0.27.0
Microsoft azl3 opensc 0.26.1-1
Microsoft cbl2 opensc 0.23.0-5

Event History

Mar 30, 2026
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Apr 1, 2026
Data Sourced
via Microsoft·08:14 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:14 AM
Affected Software
Updated
via Microsoft·08:14 AM
DescriptionSeverity
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-66037?

CVE-2025-66037 has a high severity rating due to potential for remote exploitation through crafted input.

2

How do I fix CVE-2025-66037?

To resolve CVE-2025-66037, upgrade OpenSC to version 0.27.0 or later.

3

What systems are affected by CVE-2025-66037?

CVE-2025-66037 affects OpenSC versions prior to 0.27.0.

4

What type of vulnerability is CVE-2025-66037?

CVE-2025-66037 is classified as an out-of-bounds vulnerability.

5

What might happen if CVE-2025-66037 is exploited?

Exploitation of CVE-2025-66037 could lead to unauthorized heap read access, potentially allowing an attacker to execute arbitrary code.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203