CVE-2026-10275

A flaw was found in OpenSC, specifically within the pkcs11-tool Key Generation Module. This vulnerability, located in the test_kpgen_certwrite function, is a buffer overflow that can be triggered remotely. A remote attacker could exploit this flaw, potentially leading to information disclosure, data corruption, or denial of service.

This Moderate impact flaw in OpenSC's pkcs11-tool Key Generation Module could lead to information disclosure, data corruption, or denial of service. While the vulnerability is remotely triggerable, its high attack complexity and difficult exploitability, requiring user interaction with a specially crafted input to the pkcs11-tool utility, limit its immediate risk in typical Red Hat deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.