Vulnerabilities > CVE-2019-20792 - Double Free vulnerability in Opensc Project Opensc
Attack vector
PHYSICAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19208
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19208
- https://github.com/OpenSC/OpenSC/commit/c246f6f69a749d4f68626b40795a4f69168008f4
- https://github.com/OpenSC/OpenSC/commit/c246f6f69a749d4f68626b40795a4f69168008f4
- https://github.com/OpenSC/OpenSC/compare/0.19.0...0.20.0
- https://github.com/OpenSC/OpenSC/compare/0.19.0...0.20.0