CVE-2026-10275

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10275", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-05-31T16:00:08.522Z", "datePublished": "2026-06-01T16:45:14.476Z", "dateUpdated": "2026-06-01T19:31:20.646Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-01T16:45:14.476Z"}, "title": "OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-120", "lang": "en", "description": "Buffer Overflow"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-119", "lang": "en", "description": "Memory Corruption"}]}], "affected": [{"vendor": "n/a", "product": "OpenSC", "versions": [{"version": "0.26.0", "status": "affected"}, {"version": "0.26.1", "status": "affected"}], "cpes": ["cpe:2.3:a:opensc:opensc:*:*:*:*:*:*:*:*"], "modules": ["pkcs11-tool Key Generation Module"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2.3, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "LOW"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.1, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-05-31T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-05-31T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-05-31T18:05:19.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Fantasy (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/367568", "name": "VDB-367568 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/367568/cti", "name": "VDB-367568 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10275", "name": "CVE-2026-10275 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/825403", "name": "Submit #825403 | OpenSC OpenSC 0.26.1 and earlier Buffer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/OpenSC/OpenSC/issues/3682", "tags": ["issue-tracking"]}, {"url": "https://github.com/OpenSC/OpenSC/pull/3684", "tags": ["issue-tracking", "patch"]}, {"url": "https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg", "tags": ["exploit"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab", "tags": ["patch"]}, {"url": "https://github.com/OpenSC/OpenSC/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-01T19:31:06.822597Z", "id": "CVE-2026-10275", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T19:31:20.646Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10275", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-01T19:31:06.822597Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T19:31:13.129Z"}}], "cna": {"tags": ["x_open-source"], "title": "OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow", "credits": [{"lang": "en", "type": "reporter", "value": "Fantasy (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2.3, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.1, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:opensc:opensc:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["pkcs11-tool Key Generation Module"], "product": "OpenSC", "versions": [{"status": "affected", "version": "0.26.0"}, {"status": "affected", "version": "0.26.1"}]}], "timeline": [{"lang": "en", "time": "2026-05-31T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-05-31T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-05-31T18:05:19.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/367568", "name": "VDB-367568 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/367568/cti", "name": "VDB-367568 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10275", "name": "CVE-2026-10275 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/825403", "name": "Submit #825403 | OpenSC OpenSC 0.26.1 and earlier Buffer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/OpenSC/OpenSC/issues/3682", "tags": ["issue-tracking"]}, {"url": "https://github.com/OpenSC/OpenSC/pull/3684", "tags": ["issue-tracking", "patch"]}, {"url": "https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg", "tags": ["exploit"]}, {"url": "https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab", "tags": ["patch"]}, {"url": "https://github.com/OpenSC/OpenSC/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "Buffer Overflow"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-119", "description": "Memory Corruption"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-01T16:45:14.476Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10275", "state": "PUBLISHED", "dateUpdated": "2026-06-01T19:31:20.646Z", "dateReserved": "2026-05-31T16:00:08.522Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-06-01T16:45:14.476Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:opensc:opensc:*:*:*:*:*:*:*:*"], "modules": ["pkcs11-tool Key Generation Module"], "product": "OpenSC", "vendor": "n/a", "versions": [{"status": "affected", "version": "0.26.0"}, {"status": "affected", "version": "0.26.1"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad en OpenSC hasta la versi\u00f3n 0.26.1. Esto afecta a la funci\u00f3n test_kpgen_certwrite del archivo src/tools/pkcs11-tool.c del componente pkcs11-tool Key Generation Module. Esta manipulaci\u00f3n provoca desbordamiento de b\u00fafer. El ataque puede llevarse a cabo de forma remota. La complejidad de un ataque es bastante alta. Se indica que la explotabilidad es dif\u00edcil. El exploit ha sido publicado y puede ser utilizado. Nombre del parche: 814f745b3b6d100295f65f1935edd33d520d33ab. Se recomienda aplicar un parche para corregir este problema."}], "id": "CVE-2026-10275", "lastModified": "2026-07-22T07:10:00.107", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.3, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10275", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-01T19:31:06.822597Z", "version": "2.0.3"}}]}, "published": "2026-06-01T17:16:44.247", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/OpenSC/OpenSC/"}, {"source": "cna@vuldb.com", "url": "https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab"}, {"source": "cna@vuldb.com", "url": "https://github.com/OpenSC/OpenSC/issues/3682"}, {"source": "cna@vuldb.com", "url": "https://github.com/OpenSC/OpenSC/pull/3684"}, {"source": "cna@vuldb.com", "url": "https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-10275"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/825403"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/367568"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/367568/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "CWE-120"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "opensc: OpenSC: Buffer overflow in pkcs11-tool Key Generation Module", "id": "2483908", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483908"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "status": "draft"}, "cwe": "CWE-120", "details": ["A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue.", "A flaw was found in OpenSC, specifically within the `pkcs11-tool` Key Generation Module. This vulnerability, located in the `test_kpgen_certwrite` function, is a buffer overflow that can be triggered remotely. A remote attacker could exploit this flaw, potentially leading to information disclosure, data corruption, or denial of service."], "name": "CVE-2026-10275", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "opensc", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-06-01T16:45:14Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-10275\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-10275\nhttps://github.com/OpenSC/OpenSC/\nhttps://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab\nhttps://github.com/OpenSC/OpenSC/issues/3682\nhttps://github.com/OpenSC/OpenSC/pull/3684\nhttps://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg\nhttps://vuldb.com/cve/CVE-2026-10275\nhttps://vuldb.com/submit/825403\nhttps://vuldb.com/vuln/367568\nhttps://vuldb.com/vuln/367568/cti"], "statement": "This Moderate impact flaw in OpenSC's `pkcs11-tool` Key Generation Module could lead to information disclosure, data corruption, or denial of service. While the vulnerability is remotely triggerable, its high attack complexity and difficult exploitability, requiring user interaction with a specially crafted input to the `pkcs11-tool` utility, limit its immediate risk in typical Red Hat deployments.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.26.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.26.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "OpenSC", "source": "cna", "vendor": "n/a"}, "product": "opensc", "vendor": "opensc"}], "created": "2026-06-01T18:30:05.847737+00:00", "updated": "2026-06-01T18:30:06.278546+00:00", "vendors": ["opensc", "opensc$PRODUCT$opensc"]}