Related Vulnerabilities: CVE-2020-26572  

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

Severity Medium

Remote No

Type Arbitrary code execution

Description

The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.

AVG-1298 opensc 0.20.0-3 Medium Vulnerable

https://github.com/OpenSC/OpenSC/releases/tag/0.21.0
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22967
https://github.com/OpenSC/OpenSC/commit/9d294de90d1cc66956389856e60b6944b27b4817