← CVE Intelligence

CVE-2023-33222

Stack buffer overflow when reading DESFire card PUBLISHED

Description (CNA)

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

Affected (CNA)

Vendor / productVersions
IDEMIA / SIGMA Lite & Lite +affected 0 before 4.15.5
IDEMIA / SIGMA Wideaffected 0 before 4.15.5
IDEMIA / SIGMA Extremeaffected 0 before 4.15.5
IDEMIA / MorphoWave Compact/XPaffected 0 before 2.12.2
IDEMIA / VisionPassaffected 0 before 2.12.2
IDEMIA / MorphoWave SPaffected 0 before 1.2.7

CWE

CWE-121

References

ADP enrichment

CVE

No English description supplied.