A vulnerability labeled as critical has been found in OpenSC up to 0.26.x. This affects an unknown part of the component USB Handler. Such manipulation leads to stack-based buffer overflow.

This vulnerability is traded as CVE-2025-49010. The attack can be executed directly on the physical device. There is no exploit available.

The affected component should be upgraded.