Affected: IDEMIA SIGMA Lite & Lite +, IDEMIA SIGMA Wide, IDEMIA SIGMA Extreme, IDEMIA MorphoWave Compact/XP, IDEMIA VisionPass, IDEMIA MorphoWave SP

The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device