CVE catalog
CVE-2026-40510
OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigg
- Severity
- Medium · CVSS 6.3
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 27, 2026
A flaw was found in OpenSC. A physically present attacker can exploit a stack buffer overflow vulnerability in the `piv_process_history()` function by presenting a specially crafted Personal Identity Verification (PIV) smart card or USB device. This can lead to memory corruption within the system, potentially causing instability or unexpected behavior. opensc: OpenSC: Memory corruption via crafted PIV smart card The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | opensc | Not reported | 0.27.0 | fixed |
| Suse | opensc | linux enterprise server 16.0 | 0.26.1-160000.4.1 | fixed |
| Suse | opensc | linux enterprise server for sap applications 16.0 | 0.26.1-160000.4.1 | fixed |
| Suse | opensc | linux enterprise server 16.0 | 0.26.1-160000.4.1 | fixed |
| Suse | opensc | linux enterprise server for sap applications 16.0 | 0.26.1-160000.4.1 | fixed |
| Suse | opensc | linux micro 6.2 | 0.26.1-160000.4.1 | fixed |
| Suse | opensc | linux micro 6.1 | 0.24.0-slfo.1.1_5.1 | fixed |
| Suse | opensc | linux enterprise server ltss extended security 12 sp5 | 0.13.0-3.39.1 | fixed |
| Suse | opensc | linux enterprise module for basesystem 15 sp7 | 0.22.0-150600.11.14.1 | fixed |
| Suse | opensc | linux enterprise micro 5.3 | 0.22.0-150400.3.20.1 | fixed |
| Suse | opensc | linux enterprise micro 5.4 | 0.22.0-150400.3.20.1 | fixed |
| Suse | opensc | linux enterprise micro 5.5 | 0.22.0-150400.3.20.1 | fixed |
| Suse | opensc | linux micro 6.0 | 0.24.0-7.1 | fixed |
| Opensuse | opensc | leap 16.0 | 0.26.1-160000.4.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Cpe | opensc | cpe | Not reported | 0.27.0 | Not reported | Not reported | Not reported |
| Suse | opensc | rpm | linux enterprise server 16.0 | 0.26.1-160000.4.1 | Not reported | SUSE-SU-2026:23697-1 | Not reported |
| Suse | opensc | rpm | linux enterprise server for sap applications 16.0 | 0.26.1-160000.4.1 | Not reported | SUSE-SU-2026:23697-1 | Not reported |
| Suse | opensc | rpm | linux enterprise server 16.0 | 0.26.1-160000.4.1 | Not reported | SUSE-SU-2026:23717-1 | Not reported |
| Suse | opensc | rpm | linux enterprise server for sap applications 16.0 | 0.26.1-160000.4.1 | Not reported | SUSE-SU-2026:23717-1 | Not reported |
| Suse | opensc | rpm | linux micro 6.2 | 0.26.1-160000.4.1 | Not reported | SUSE-SU-2026:23543-1 | Not reported |
| Suse | opensc | rpm | linux micro 6.1 | 0.24.0-slfo.1.1_5.1 | Not reported | SUSE-SU-2026:23527-1 | Not reported |
| Suse | opensc | rpm | linux enterprise server ltss extended security 12 sp5 | 0.13.0-3.39.1 | Not reported | SUSE-SU-2026:4108-1 | Not reported |
| Suse | opensc | rpm | linux enterprise module for basesystem 15 sp7 | 0.22.0-150600.11.14.1 | Not reported | SUSE-SU-2026:4123-1 | Not reported |
| Suse | opensc | rpm | linux enterprise micro 5.3 | 0.22.0-150400.3.20.1 | Not reported | SUSE-SU-2026:4122-1 | Not reported |
| Suse | opensc | rpm | linux enterprise micro 5.4 | 0.22.0-150400.3.20.1 | Not reported | SUSE-SU-2026:4122-1 | Not reported |
| Suse | opensc | rpm | linux enterprise micro 5.5 | 0.22.0-150400.3.20.1 | Not reported | SUSE-SU-2026:4122-1 | Not reported |
| Suse | opensc | rpm | linux micro 6.0 | 0.24.0-7.1 | Not reported | SUSE-SU-2026:23478-1 | Not reported |
| Opensuse | opensc | rpm | leap 16.0 | 0.26.1-160000.4.1 | Not reported | OPENSUSE-SU-2026:21820-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23527-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-40510]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23478-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23527-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23543-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23697-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23717-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4108-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4122-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4123-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21820-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40510.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1755.json]
[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]