OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than 118 bytes in the Key History Object ASN.1 response.

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781267272 advisory.

  - OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in     piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger     memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than     118 bytes in the Key History Object ASN.1 response. (CVE-2026-40510)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781267272 advisory.

  - OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in     piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger     memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than     118 bytes in the Key History Object ASN.1 response. (CVE-2026-40510)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780711381 advisory.

  - OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in     piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger     memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than     118 bytes in the Key History Object ASN.1 response. (CVE-2026-40510)

  - OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in     the do_key_value() function in src/pkcs15init/profile.c that allows attackers to corrupt memory by     supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry beginning     with '=' followed by more than sizeof(keybuf) characters is copied into keybuf via memcpy without a length     check, causing both stack and heap buffer overruns. (CVE-2026-40528)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4123-1 advisory.

    This update for opensc fixes the following issue:

    - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to     trigger memory       corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4108-1 advisory.

    This update for opensc fixes the following issue:

    - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to     trigger memory       corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21820-1 advisory.

    This update for opensc fixes the following issue:

    - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to     trigger memory       corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in     piv_process_history() in src/libopensc/card-piv.c that allows physically present attackers to trigger     memory corruption by presenting a crafted PIV smart card or USB device returning a URL field longer than     118 bytes in the Key History Object ASN.1 response. (CVE-2026-40510)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
360595	Rocky Linux 9.6 [TuxCare] Security Update: opensc (ALMALINUX9.6:CLSA-2026:1781267272)	Nessus	Rocky Linux Local Security Checks	Local	low
360557	AlmaLinux 9.6 [TuxCare] Security Update: opensc (ALMALINUX9.6:CLSA-2026:1781267272)	Nessus	Alma Linux Local Security Checks	Local	low
360202	AlmaLinux 9.2 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1780711381)	Nessus	Alma Linux Local Security Checks	Local	low
345844	SUSE SLED15 / SLES15 Security Update : opensc (SUSE-SU-2026:4123-1)	Nessus	SuSE Local Security Checks	Local	low
345842	SUSE SLES12 Security Update : opensc (SUSE-SU-2026:4108-1)	Nessus	SuSE Local Security Checks	Local	low
344997	openSUSE 16 Security Update : opensc (openSUSE-SU-2026:21820-1)	Nessus	SuSE Local Security Checks	Local	low
321650	Linux Distros Unpatched Vulnerability : CVE-2026-40510	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-40510

low

Tenable Plugins

low

low

low

low

low

low

low