Description
HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HINET | HiCOS Citizen verification component - Stack Buffer Overflow | libHicos_p11v1.so CHT PKCS#11 3.0.3.30306, HiCOSPKCS11.dll CHT PKCS#11 3.1.0.00002, libHicos_p11v1.dylib CHT PKCS#11 3.0.3.30404 | — |