OSV-2020-2222

    Dashboard / Vulnerabilities / OSV-2020-2222

    OSV-2020-2222

    Published: 4 Dec 2020Last Modified: 13 Apr 2022

    Summary: Heap-double-free in sc_pkcs15_free_tokeninfo

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185 ``` Crash type: Heap-double-free Crash state: sc_pkcs15_free_tokeninfo sc_pkcs15_card_free fuzz_pkcs15_reader.c ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185

    Affected packages

    Package

    Name: opensc

    Purl: pkg:generic/opensc

    Affected ranges

    Type: GIT

    Events:

    Introduced- b02da8348be97d4b24081783f6af46757373bc3e
    Fixed -f015746d22d249642c19674298a18ad824db0ed7

    Affected versions

    0.21.0
    0.21.0-rc1
    0.21.0-rc2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2020-2222 | CVE-DB