Affected: IDEMIA SIGMA Lite & Lite +, IDEMIA SIGMA Wide, IDEMIA SIGMA Extreme, IDEMIA MorphoWave Compact/XP, IDEMIA VisionPass, IDEMIA MorphoWave SP

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key.