Back to Database
Status published
Medium
CVE-2025-13763
Libopensc: opensc: multiple uses of uninitialized variable
Vulnerability Description
Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-13763
Credits & Attribution
No credits recorded in the NVD database.
References
More from OpenSC
View All →CVE-2025-66215
OpenSC: Stack-buffer-overflow WRITE in card-oberthur
Low
3.8
CVE-2025-66038
OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
Low
3.9
CVE-2025-66037
OpenSC: Out of Bounds vulnerability
Low
3.9
CVE-2025-49010
OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
Low
3.8
CVE-2025-24032
PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)
Critical
9.2
Affected Vendor
OpenSC
View all reports →Affected Software
OpenSC, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Vulnerable Versions:
0
Timeline
Official Publish:
April 23rd, 2026
Last Modified:
June 30th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.