medium6.8
CVE-2023-33222
When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received…
Impact
When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idemia | Sigma Lite Firmware | before 4.15.5 |
| Idemia | Sigma Lite\+ Firmware | before 4.15.5 |
| Idemia | Sigma Extreme Firmware | before 4.15.5 |
| Idemia | Sigma Wide Firmware | before 4.15.5 |
| Idemia | Morphowave Compact Firmware | before 2.12.2 |
| Idemia | Morphowave Xp Firmware | before 2.12.2 |
| Idemia | Visionpass Firmware | before 2.12.2 |
| Idemia | Morphowave Sp Firmware | before 1.2.7 |