CVE-2025-13763
Medium
Description
Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs
SeverityMedium
CVSS5.7
Exploit probability—
Product
OpenSC
PublishedApr 23, 2026
First seenApr 23, 2026
Weakness typeCWE-457CWE-457
How to fix
Update
- OpenSC OpenSC0.27.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSC OpenSC | v < 0.27.0 | 0.27.0 |
| Red Hat Red Hat Enterprise Linux 10 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 7 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 8 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 9 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.