← CVE Intelligence

CVE-2023-33220

Stack Buffer Overflow when checking some attributes during retrofit PUBLISHED

Description (CNA)

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

Affected (CNA)

Vendor / productVersions
IDEMIA / SIGMA Lite & Lite +affected 0 before 4.15.5
IDEMIA / SIGMA Wideaffected 0 before 4.15.5
IDEMIA / SIGMA Extremeaffected 0 before 4.15.5
IDEMIA / MorphoWave Compact/XPaffected 0 before 2.12.2
IDEMIA / VisionPassaffected 0 before 2.12.2
IDEMIA / MorphoWave SPaffected 0 before 1.2.7

CWE

CWE-121

References

ADP enrichment

CVE

No English description supplied.