← CVE Intelligence

CVE-2023-33221

Heap Buffer Overflow when reading DESFire card PUBLISHED

Description (CNA)

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key.

Affected (CNA)

Vendor / productVersions
IDEMIA / SIGMA Lite & Lite +affected 0 before 4.15.5
IDEMIA / SIGMA Wideaffected 0 before 4.15.5
IDEMIA / SIGMA Extremeaffected 0 before 4.15.5
IDEMIA / MorphoWave Compact/XPaffected 0 before 2.12.2
IDEMIA / VisionPassaffected 0 before 2.12.2
IDEMIA / MorphoWave SPaffected 0 before 1.2.7

CWE

CWE-122

References

ADP enrichment

CVE

No English description supplied.