A vulnerability identified as problematic has been detected in OpenSC up to 0.26.x. Affected by this issue is the function
sc_compacttlv_find_tag. This manipulation causes buffer over-read.
This vulnerability appears as CVE-2025-66038. It is feasible to perform the attack on the physical device. There is no available exploit.
You should upgrade the affected component.
