medium6.8
CVE-2019-20792
OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
Impact
OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensc Project | Opensc | before 0.20.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19208
- https://github.com/OpenSC/OpenSC/commit/c246f6f69a749d4f68626b40795a4f69168008f4
- https://github.com/OpenSC/OpenSC/compare/0.19.0...0.20.0
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19208
- https://github.com/OpenSC/OpenSC/commit/c246f6f69a749d4f68626b40795a4f69168008f4
- https://github.com/OpenSC/OpenSC/compare/0.19.0...0.20.0