{"action":"Upgrade opensc to 0.25.1-r0 or later.","affected":[{"fixed":"0.25.1-r0","introduced":"0"}],"component":"opensc","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.22","exploited":false,"fixed_versions":["0.25.1-r0"],"id":"tcs_01M6GHRDPXBMPHEESZWE354JEX","modified_at":"2026-11-03T06:32:04.460452605Z","published_at":"2024-02-12T23:15:08.410Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-1454","https://security.alpinelinux.org/vuln/CVE-2024-1454"],"severity":{"label":"low","score":3.4},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-1454#Alpine:v3.22/opensc","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-1454"}],"summary":"The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. A"}