Vulnerabilities > CVE-2019-20792 - Double Free vulnerability in Opensc Project Opensc

047910
CVSS 6.8 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
opensc-project
CWE-415

Summary

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

Common Weakness Enumeration (CWE)