CVE-2023-33221 — Heap Buffer Overflow when reading DESFire card

Affected: IDEMIA SIGMA Lite & Lite +, IDEMIA SIGMA Wide, IDEMIA SIGMA Extreme, IDEMIA MorphoWave Compact/XP, IDEMIA VisionPass, IDEMIA MorphoWave SP

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key.

Most recent entries from all

CVE-2023-33221 — Heap Buffer Overflow when reading DESFire card