Description (CNA)
The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IDEMIA / SIGMA Lite & Lite + | affected 0 before 4.15.5 |
| IDEMIA / SIGMA Wide | affected 0 before 4.15.5 |
| IDEMIA / SIGMA Extreme | affected 0 before 4.15.5 |
| IDEMIA / MorphoWave Compact/XP | affected 0 before 2.12.2 |
| IDEMIA / VisionPass | affected 0 before 2.12.2 |
| IDEMIA / MorphoWave SP | affected 0 before 1.2.7 |
CWE
CWE-121
References
ADP enrichment
No English description supplied.