A heap double free issue was found in Opensc before version 0.22.0 in scpkcs15freetokeninfo.

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.

A use after return issue was found in Opensc before version 0.22.0 in insertpin function that could potentially crash programs using the library.

A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid.

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.

pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the "OpenSC" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235.

OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability

OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check.

An issue was discovered in the pamp11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.