← All advisories

Medium severity4.6NVD Advisory· Published Dec 1, 2019· Updated Jun 17, 2026

CVE-2019-19481

CVE-2019-19481

Description

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Openscad/openscadllm-fuzzy
Range: <=0.19.0, <=0.20.0-rc3
osv-coords4 versions
pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/opensc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015
< 0.18.0-150000.3.23.1+ 3 more
- (no CPE)range: < 0.18.0-150000.3.23.1
- (no CPE)range: < 0.18.0-150000.3.23.1
- (no CPE)range: < 0.18.0-150000.3.23.1
- (no CPE)range: < 0.18.0-150000.3.23.1

Patches

Vulnerability mechanics

References

4

github.com/OpenSC/OpenSC/commit/b75c002cfb1fd61cd20ec938ff4937d7b1a94278nvdPatch
bugs.chromium.org/p/oss-fuzz/issues/detailnvdPermissions RequiredThird Party Advisory
www.openwall.com/lists/oss-security/2019/12/29/1nvdMailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/nvd

News mentions

0

No linked articles in our index yet.