Skip to content
Heist/ feed
Back to feed
MediumFix available

opensc — security advisory

Type: advisorySources: OSVAdvisory ID: DEBIAN-CVE-2021-42782

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.

Products
opensc
Affected versions
Not specified
Fixed versions
0.22.0-1
CVEs
CVE-2021-42782
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 01:06 UTC · Revision 1

Source evidence

DEBIAN-CVE-2021-42782

core-osv · Original source

Published 18 Apr 2022, 17:15 UTC

Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.

osv:DEBIAN-CVE-2021-42782

opensc

Fixed versions: 0.22.0-1

opensc

Fixed versions: 0.22.0-1

opensc

Fixed versions: 0.22.0-1

Complete source record
{
  "id": "9267f40ffd3c2f02da290019b20aaf91100514a875eb859ef665f3664d1d96e0",
  "url": "https://osv.dev/vulnerability/DEBIAN-CVE-2021-42782",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "DEBIAN-CVE-2021-42782",
    "summary": "Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.",
    "evidence": "osv:DEBIAN-CVE-2021-42782",
    "products": [
      {
        "name": {
          "value": "opensc",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.22.0-1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "opensc",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.22.0-1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "opensc",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.22.0-1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "DEBIAN-CVE-2021-42782",
      "aliases": [
        "DEBIAN-CVE-2021-42782"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.22.0-1"
                }
              ]
            }
          ],
          "package": {
            "name": "opensc",
            "purl": "pkg:deb/debian/opensc?arch=source&distro=bookworm",
            "ecosystem": "Debian:12"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-42782.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.22.0-1"
                }
              ]
            }
          ],
          "package": {
            "name": "opensc",
            "purl": "pkg:deb/debian/opensc?arch=source&distro=trixie",
            "ecosystem": "Debian:13"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-42782.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.22.0-1"
                }
              ]
            }
          ],
          "package": {
            "name": "opensc",
            "purl": "pkg:deb/debian/opensc?arch=source&distro=forky",
            "ecosystem": "Debian:14"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-42782.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        }
      ],
      "modified": "2026-10-23T18:04:16.127560819Z",
      "provider": "osv",
      "upstream": [
        "CVE-2021-42782"
      ],
      "references": [
        "https://security-tracker.debian.org/tracker/CVE-2021-42782"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2021-42782",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 423084,
  "published_at": "2022-04-18T17:15:16.38+00:00"
}