CVE-2026-94395
Description
A flaw was found in SafeNet Authentication Client (SAC). A stack-based buffer overflow vulnerability in the SIS token engine allows an attacker connecting a malicious physical or software-emulated smart card to execute arbitrary code with the privileges of the affected process. This flaw occurs during card processing prior to user authentication or personal identification number (PIN) entry. Successful exploitation could lead to arbitrary code execution or cause the application to crash, resulting in a denial of service (DoS).
Statement
This vulnerability is rated as Moderate impact because successful exploitation requires physical access to connect a crafted hardware card or local privileges to attach an emulated token device. SafeNet Authentication Client is proprietary third-party middleware that is not packaged or distributed within Red Hat Enterprise Linux or other Red Hat product lines. As a result, standard Red Hat installations are unaffected unless administrators have independently deployed this vendor software.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
