Medium 5.0Published Jun 1, 2026

CVE-2026-10275OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

Updated under an hour ago (Oct 28, 2026, 3:10 AM ET)

Does this affect you?

It affects n/a OpenSC. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for n/a OpenSC

Exploited in the last 30 days

A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been published and may be used. Patch name: 814f745b3b6d100295f65f1935edd33d520d33ab. It is recommended to apply a patch to fix this issue.

CVSS: 5.0 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
Weakness (CWE): CWE-120, CWE-119
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Deferred
Record last updated: Jun 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

n/a OpenSC opensc:opensc	0.26.0; 0.26.1	CNA record

References

References

https://vuldb.com/vuln/367568	vdb-entry, technical-description
https://vuldb.com/vuln/367568/cti	signature, permissions-required
https://vuldb.com/cve/CVE-2026-10275	third-party-advisory
https://vuldb.com/submit/825403	third-party-advisory
https://github.com/OpenSC/OpenSC/issues/3682	issue-tracking
https://github.com/OpenSC/OpenSC/pull/3684	issue-tracking, patch
https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg	exploit
https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab	patch
https://github.com/OpenSC/OpenSC/	product

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.