Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.
CWE-125