cbcvebase.
CVE-2019-6502
published 2019-01-22

CVE-2019-6502: sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.

high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.

Affected

7 ranges
VendorProductVersion rangeFixed in
debianopensc< opensc 0.20.0-1 (bookworm)opensc 0.20.0-1 (bookworm)
googlechrome_chrome
opensc_projectopensc
opensc_projectopensc>= 0 < 0.20.0-10.20.0-1
opensc_projectopensc>= 0 < 0.20.0-10.20.0-1
opensc_projectopensc>= 0 < 0.20.0-10.20.0-1
opensc_projectopensc>= 0 < 0.20.0-10.20.0-1

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH