CVE-2009-0368: Opensc-Project Opensc

Low severity, CVSS 2.1. EPSS: 1.2% chance of exploitation in the next 30 days.

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.

Affected products

• Opensc-Project Opensc: up to and including 0.11.6; version 0.3.2 only; version 0.3.5 only; version 0.4.0 only; version 0.5.0 only; version 0.6.0 only; …

Published 2009-03-02. Last modified 2026-06-16.