CVEDB API

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.4%

CVSS Severity

CVSS v3 Score 6.8

CVSS v2 Score 4.6

References

Products affected by CVE-2019-20792

Opensc Project » Opensc » Version: 0.12.2

cpe:2.3:a:opensc_project:opensc:0.12.2
Opensc Project » Opensc » Version: 0.13.0

cpe:2.3:a:opensc_project:opensc:0.13.0
Opensc Project » Opensc » Version: 0.14.0

cpe:2.3:a:opensc_project:opensc:0.14.0
Opensc Project » Opensc » Version: 0.15.0

cpe:2.3:a:opensc_project:opensc:0.15.0
Opensc Project » Opensc » Version: 0.16.0

cpe:2.3:a:opensc_project:opensc:0.16.0
Opensc Project » Opensc » Version: 0.17.0

cpe:2.3:a:opensc_project:opensc:0.17.0
Opensc Project » Opensc » Version: 0.18.0

cpe:2.3:a:opensc_project:opensc:0.18.0
Opensc Project » Opensc » Version: 0.19.0

cpe:2.3:a:opensc_project:opensc:0.19.0
Opensc Project » Opensc » Version: 0.2.0

cpe:2.3:a:opensc_project:opensc:0.2.0
Opensc Project » Opensc » Version: 0.3.0

cpe:2.3:a:opensc_project:opensc:0.3.0
Opensc Project » Opensc » Version: 0.3.1

cpe:2.3:a:opensc_project:opensc:0.3.1