CVE-2010-4530

CVE-2010-4530 describes a signedness error in the libccid driver, specifically in ccid_serial.c, affecting PCSC-Lite 1.5.3 and potentially other products utilizing the USB Chip/Smart Card Interface Devices (CCID) driver. This vulnerability allows a physically proximate attacker to execute arbitrary code by presenting a specially crafted smart card. The card's serial number can induce a negative value in a memcpy operation, leading to a buffer overflow. The vulnerability has a CVSS score of 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P), indicating a low severity. Exploitation requires physical access to the affected system and medium attack complexity. A successful exploit could result in partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low attention and perceived risk.