CVE-2025-66215: OpenSC: Stack-buffer-overflow WRITE in card-oberthur
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that would present the system with specially crafted responses to the APDUs. This issue has been patched in version 0.27.0.
Other sources
OpenSC: Stack-buffer-overflow WRITE in card-oberthur
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
azurelinux/openscto a version that resolves this vulnerability.Fixed in 0.23.0-6 - Upgrade
Upgrade
azurelinux/openscto a version that resolves this vulnerability.Fixed in 0.27.1-1 - Upgrade
Upgrade
OpenSCto a version that resolves this vulnerability.Fixed in 0.27.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66215?
CVE-2025-66215 has a high severity due to the potential for a stack-buffer-overflow, which can lead to system compromise.
How do I fix CVE-2025-66215?
To mitigate CVE-2025-66215, upgrade OpenSC to version 0.27.0 or later.
Who is affected by CVE-2025-66215?
CVE-2025-66215 affects users of OpenSC versions prior to 0.27.0 running on systems with physical access.
What consequences can arise from CVE-2025-66215?
Exploitation of CVE-2025-66215 can lead to unauthorized access and control over the affected system.
What kind of vulnerability is CVE-2025-66215?
CVE-2025-66215 is categorized as a stack-buffer-overflow vulnerability.