CVE-2010-4530: muscle pcsc-lite Numeric Errors
Vulnerability summary
CVE-2010-4530 is a medium (CVSS 4.4) Numeric Errors vulnerability in muscle pcsc-lite. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 45.6% of scored vulnerabilities.
Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 18-01-2011PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.54%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.54% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat2 products
- ccid< 0:1.3.8-2.el5 | < 0:1.3.9-6.el6
- ccid-debuginfo< 0:1.3.8-2.el5 | < 0:1.3.9-6.el6
Debian1 product
- ccid< 1.3.11-2
Muscle1 product
- pcsc-lite1.5.3
Opensuse1 product
- pcsc-ccid&distro=openSUSE Tumbleweed< 1.4.25-1.1
4 vendors · 5 products
References
23 links- lists.fedoraproject.org/pipermail/package-announce/2011-January/053097.htmlVendor AdvisoryX Refsource FEDORAPatch
- lists.fedoraproject.org/pipermail/package-announce/2011-January/053076.htmlVendor AdvisoryX Refsource FEDORAPatch
- kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRM
