OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyadd_object in libopensc/card-coolkey.c lacks a uniqueness check.
{
"source": "CPE_FIELD",
"cpe": "cpe:2.3:a:opensc_project:opensc:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.20.0"
}
]
}